The project has a clear license, tests, release notes, and no install-time scripts, but its security documentation and workflow hardening are limited. Pin an earlier maintained release only if you can accept that version 6.0.0 has seen no repository activity for about 18 months.
55%
Total Score
33
100
78
75
The repository recorded zero commits and zero active maintainers in the last three months, indicating currently absent development activity. Combined with no registry releases in the last 12 months, this raises abandonment risk.
The package and repository are owned by the same individual account, so the source linkage is coherent. Individual ownership does not provide the resilience of organization backing.
The package has 21 releases and a short historical median interval, but it has had no registry releases in the last 12 months; the latest release was about 18 months ago. This materially weakens confidence in ongoing maintenance.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is ambiguous by itself, but it offers no evidence of an active maintenance community.
The repository has no stars or forks and one watcher. Popularity is only supporting evidence, but these counts provide little independent evidence of broad community adoption.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.5 | — | — |
illuminate/console Version ^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/filesystem Version ^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.