Clear documentation, tests, and a matching repository provide useful transparency. The project is new and depends on one active contributor, while its six workflow actions are all unpinned.
60%
Total Score
50
100
86
75
The package and repository are owned by the same individual account, confirming ownership alignment but providing no organization-level maintenance backing.
This is the first release, published today, so there is no release track record to demonstrate sustained maintenance or stability.
One contributor made all commits in the measured period, leaving no demonstrated backup if that maintainer stops working on the project.
Only two commits from one active maintainer were observed in the last three months. The activity is recent but too limited to establish sustained maintenance capacity.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap for a package handling database backups and remote storage.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.15.2 || ^8.0.1 | — | — |
illuminate/console Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/process Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/support Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/contracts Version ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.