It includes a clear README, changelog, MIT license, and a GitHub release note. A single registry maintainer and four open pull requests limit confidence despite organization backing.
58%
Total Score
63
100
81
75
Only one account has registry publish access, which is a limited publishing base. Organization ownership provides some backing, but it does not demonstrate active maintenance by itself.
The package is mature, with releases since 2018, but only one release in the last 12 months and a median interval of about 128 days indicate a slow cadence.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance may be slowing or paused.
There are four open pull requests, with no new or merged pull requests in the last month; unresolved contribution activity modestly reduces confidence in project responsiveness.
Composer build tooling is present, but no security-scanning tools were detected, leaving a repository hygiene gap for a package that handles Twilio integration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twilio/sdk Version ^7.3 | — | — |
illuminate/events Version ~9|~10 | — | — |
illuminate/support Version ~9|~10 | — | — |
illuminate/collections Version ~9|~10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.