Healthy for adoption, with caveats. It has very active recent development, strong documentation, tests in the repository, and clear licensing, but it is only 27 days old and all recent commits come from one contributor.
76%
Total Score
70
100
79
90
A post-autoload-dump install script is present; this adds installation complexity, but the signal does not indicate a dangerous or excessive lifecycle hook.
One registry maintainer matches the repository owner, which is consistent with the linked personal project but leaves limited publishing redundancy.
The repository and registry are owned by the same individual account, so there is no organizational backing to offset the concentrated maintainer base.
The package is only 27 days old, so long-term stability is unproven, although 21 releases in that period show sustained publishing activity.
All 134 recent commits came from one contributor, creating a genuine continuity risk despite the high activity level and matching project ownership.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/semver Version ^3.4 | — | — |
nikic/php-parser Version ^5.8 | — | — |
illuminate/console Version ^12.0 || ^13.0 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
illuminate/contracts Version ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.