A Laravel package for Salesforce API integration
58%
Total Score
caution
Usable with caveats: no registry releases in over a year and weak workflow safeguards limit confidence in continued maintenance.
Only one registry account has publish access. That is a modest bus-factor concern for a user-owned project, although registry access alone does not establish who actively maintains it.
The registry namespace and repository are owned by the same individual, and the repository is user-owned rather than organization-backed. This aligns ownership but leaves limited visible organizational redundancy.
The package has 13 releases over about 22 months, but none in the last 12 months and the latest registry release was over a year ago. This materially lowers confidence in ongoing maintenance.
There were no commits and no active maintainers in the three months measured, indicating a recent pause in development. The later repository push date provides some compensation but does not show sustained activity.
The repository has six stars and no forks, indicating limited adoption evidence. Popularity is supporting context rather than a decisive health measure, so this is only a minor concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^11.0 || ^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.