Usable with caveats: this is a clearly licensed, well-structured first release with tests in the repository and safe-looking build automation. It has no track record yet, no recent commit history beyond its initial publication, and lacks a security policy and explicit workflow permissions.
72%
Total Score
50
100
88
75
The registry namespace and repository owner match, and the repository is owned by the publishing user, providing consistent ownership evidence. A single-user project still has a limited continuity base.
This is the first and only release, published 0 days ago, so there is no release history demonstrating sustained maintenance or compatibility follow-through.
The repository has 0 commits and 0 active maintainers in the last 3 months, but the package itself is only 0 days old, so this reflects limited observation time more than demonstrated abandonment.
No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.
The only workflow lacks top-level token permissions, so its GitHub Actions access is not explicitly constrained in the collected configuration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
guzzlehttp/promises Version ^2.0 | — | — |
illuminate/contracts Version ^12.0 || ^13.0 | — | — |
butochnikov/typesafe-sdk-php Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.