A complete test suite, release notes, license, and security policy improve confidence in the package. Maintenance is less convincing because commit activity stopped about three months ago, with one publisher and little repository adoption.
63%
Total Score
50
83
100
Only one registry account has publish access. That is a modest resilience concern for a user-owned project, although the repository and package show substantial supporting project content.
The repository is owned by an individual account rather than an organization, so there is no organizational backing to offset the thin publisher base.
The package is young at about 111 days and has five releases, but all releases were concentrated near the start and the latest was about three months ago, leaving long-term maintenance uncertain.
The repository recorded zero commits and zero active maintainers in the last three months, which is the clearest sign that maintenance may have stalled after the initial release burst.
The repository has four stars, zero forks, and zero watchers, indicating limited adoption evidence; this is supporting caution rather than proof of poor quality.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
illuminate/support Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
phpseclib/phpseclib Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.