This release appears usable but is very new and not yet mature enough to treat as a low-risk dependency. It has a clear MIT license, substantial documentation, a coherent 97-file artifact, repository tests and changelog support, active recent commits from two contributors, dependency-update tooling, and no deprecation or archival signal. However, the package is only 0 days old with two releases published about 15 minutes apart, remains below a stable major version, has no packaged tests, has no security policy, and uses write permissions in three workflows including a pull-request-target workflow. The repository matches and documents the package, which supports provenance, but the short history means long-term maintenance and compatibility remain unproven.
67%
Total Score
67
100
89
60
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
saloonphp/saloon Version ^4.0 | — | — |
spatie/laravel-data Version ^4.19 | — | — |
illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.