A self-hosted SaaS platform for detecting early warning signals when client relationships are at risk
42%
Total Score
50
79
50
The manifest declares a proprietary license and no license file was found, which can restrict use and redistribution as a dependency.
The package defines four install or update lifecycle scripts, increasing the amount of code executed during package operations and warranting extra scrutiny.
This is the only release, published nearly eight months ago, so there is little release history to establish maintenance maturity.
The repository recorded no commits and no active maintainers in the past three months, leaving maintenance continuity uncertain for a newly released project.
The repository name does not match the package name and its README does not mention the package, weakening evidence that the linked source repository is the package’s actual project home.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/tinker Version ^2.8 | — | — |
laravel/sanctum Version ^4.0 | — | — |
guzzlehttp/guzzle Version ^7.2 | — | — |
laravel/framework Version ^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.