The package is well documented, has release notes for this version, and avoids install-time scripts. Its organization ownership and recent repository activity provide some continuity for a young package.
60%
Total Score
83
75
75
No declared license, license file, or detected repository license was found, leaving the legal terms for using this release unclear.
The package is young, with two releases over 87 days and a median interval of about 9 days. That shows initial activity but provides little long-term maintenance history.
All seven recent commits came from one contributor, creating a meaningful continuity risk. Organization ownership provides some potential handoff capacity but does not replace a second active contributor.
The repository has no security policy, so there is no documented process for reporting or handling security issues in a package that performs database synchronization and exposes a web UI.
Version 0.0.2 is not on a stable major version, so its API and behavior may still change substantially between releases.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.