The package includes a README, tests, release notes, and a declared MIT license. Pin version 1.0.1 if adopting it, since ongoing maintenance and workflow hardening are limited.
58%
Total Score
0
81
50
Only two releases appeared, both in May 2024, with no releases in the last 12 months; this indicates a very short and inactive release history.
The repository recorded zero commits and zero active maintainers over the last three months, reinforcing the risk that maintenance has stopped.
Composer build tooling is present, but no security-scanning tool was detected, leaving the project's automated security coverage unclear.
The repository has no security policy, reducing transparency for vulnerability reporting; this is a moderate hygiene concern rather than evidence of unsafe code.
The workflow audit completed cleanly with no untrusted checkouts, injection findings, or write-wide permissions, but all three action references are unpinned, leaving a supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9|^10|^11 | — | — |
phpdocumentor/reflection-docblock Version ^5.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.