The MIT license and focused dependency set are reassuring, while install-time scripts add operational exposure. The repository could not be found, so maintenance and provenance remain unverified.
44%
Total Score
100
80
75
The latest release was about 17 months ago, with no releases in the last 12 months. That is a substantial maintenance concern for a security-focused package.
The package runs post-install and post-update scripts, including installation and migration-related support files. These scripts increase operational exposure and warrant review before adoption.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mews/purifier Version * | — | — |
illuminate/support Version ^7.0|^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
ezyang/htmlpurifier Version ^4.16.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.