The package is well documented, licensed, tested in its repository, and has no install-time scripts. Its very limited release history and no commits in the last three months leave maintenance continuity uncertain, while repository security tooling is absent.
58%
Total Score
50
81
75
The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This provides some ownership consistency without showing broader project backing.
This is the package's only release, published about 10 months ago, so there is little evidence of sustained release maintenance. The repository is present and the release is stable, which partly offsets the limited history.
The repository recorded zero commits and zero active maintainers in the last three months. For a package first released about 10 months ago, that is a meaningful maintenance warning.
The repository has one star, no forks, and no watchers. Popularity is only supporting evidence, but these very low counts provide little evidence of community adoption or outside review.
Composer build tooling is present, but no security scanning tools were detected. This is a moderate transparency and maintenance gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.