This is a generally usable and transparent package: it has an MIT license, a matching repository, a complete small source tree with tests, recent publication activity, no deprecation, no install lifecycle scripts, and an organization-backed project. The main concern is maintenance continuity: the repository recorded no commits and no active maintainers in the last 3 months, while the package has only two stars and one registry maintainer, although one pull request was merged recently and the repository was pushed very recently. The lack of a security policy and explicit workflow token permissions are hygiene gaps rather than evidence that the package is unfit to depend on.
72%
Total Score
88
100
83
80
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
guzzlehttp/guzzle Version ^7.2|^8.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.