Usable with caveats: it has regular releases, a stable version, and an active, non-archived repository. However, maintenance capacity is thin, with no recent commits, no tests, no license file, and no security policy.
62%
Total Score
63
100
78
90
No declared license or license file was found in the package or repository, leaving reuse and redistribution terms unclear.
Only one registry account has publish access. The matching user-owned repository provides direct ownership context, but the single-person maintainer base still creates continuity risk.
The package includes a README, but it has no tests or changelog, and the repository has neither; this reduces verification and release transparency for a library.
The registry namespace and repository owner match, and the owner is an individual. This is consistent ownership evidence, but it does not provide organizational redundancy.
The repository recorded zero commits and zero active maintainers over the last three months. That is a meaningful maintenance concern, although the recent release and push show the project has not been abandoned outright.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10|^11|^12|^13 | — | — |
hidehalo/nanoid-php Version ^2.0 | — | — |
illuminate/database Version ^10|^11|^12|^13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.