Usable with caveats: the release is clearly packaged, licensed, documented, and backed by a matching, active repository with tests. It is still a young one-release project maintained by one contributor, with no security policy and incomplete workflow permission declarations.
68%
Total Score
50
83
80
The registry namespace and repository are owned by the same individual account, confirming direct ownership but not organizational or community backing.
This is a young package, about 40 days old, with only one release and no established release cadence. That limits evidence of long-term maintenance, though it is not abandonment by itself.
One contributor made 100% of the six recent commits, creating a clear single-maintainer continuity risk. The user-owned project has no organizational backing shown to offset that concentration.
The repository received 6 commits in the last 3 months, all from one active maintainer. This shows recent work but does not yet demonstrate durable maintenance capacity.
The repository has zero stars, forks, and watchers, so there is little evidence of external adoption or community visibility. Popularity is supporting evidence only and does not by itself make the package unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^5.5|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
littleredbutton/bigbluebutton-api-php Version ~5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.