The package includes a readable guide and focused tests, with a clean install profile. Its small dependency set and stable 1.0 release help, but ongoing maintenance evidence is thin and the workflow could better pin its actions.
61%
Total Score
67
100
81
75
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so the single publisher account offers limited backing evidence.
There has been only one release, published about eight months ago, so there is little release history to demonstrate sustained maintenance.
No commits and no active maintainers were recorded in the last three months, which is the clearest evidence that maintenance has stalled after the initial release.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption signal to offset the thin maintenance history.
Composer is used for builds, but no security scanning tool is configured. The missing scanner is a hygiene gap rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^9.0|^10.0|^11.0 | — | — |
camoo/payment-api Version ^1.0 | — | — |
illuminate/contracts Version ^9.0|^10.0|^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.