The package has a clear README, a declared MIT license, and recent implementation activity. Its limited release history, single-contributor maintenance, and lack of a security policy leave less evidence of long-term support.
68%
Total Score
63
100
88
83
Only one registry account has publish access. That is consistent with a user-owned project, but it leaves little publishing redundancy.
The repository is owned by a user account rather than an organization, so the single-contributor and single-publisher signals are not compensated by visible organizational backing.
This is the only release, published 85 days ago, so there is not enough release history to demonstrate long-term maintenance or compatibility stability.
All 10 recent commits came from one contributor, so maintenance depends entirely on a single person and has limited handoff resilience.
Composer build tooling is present, but no security scanning tooling was detected. That is a modest transparency and maintenance gap for a package distributed to dependents.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.