It has a substantial README, repository tests, and recent commits supported by build and security tooling. The MIT declaration and matching repository improve transparency, but the project remains early-stage.
68%
Total Score
67
100
88
75
Only one account has registry publishing access. Because the repository is user-owned, this reflects a genuine single-publisher dependency rather than normal organization publishing hygiene.
The package is only 100 days old but has 49 releases, with a median interval of about 10 hours; this shows active publishing but unusually rapid churn for a young project.
All 29 recent commits came from one contributor, so maintenance depends entirely on that person and has limited handoff resilience.
The repository has no published security policy, leaving the reporting and handling process for vulnerabilities unclear.
Version v0.8.32 is not a prerelease, but the 0.x major version signals that compatibility may still change before a stable 1.0 release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^12.0|^13.0|^14.0|^15.0 | — | — |
andydefer/php-services Version ^1.6.19 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.