code16/embed
Usable with caveats: it has a five-year release history, regular releases, repository tests, and active project ownership, but no commits in the last three months and only minimal consumer documentation. Review maintenance activity before adopting it for a critical application.
68%
Total Score
75
100
92
63
Health Score Breakdown
The package runs a post-autoload-dump lifecycle script during installation. This deserves review because install-time execution increases operational exposure, although this signal alone does not show that the script is unsafe.
The artifact includes a README, and the repository has tests, which supports basic usability and verification. However, the README's usage section is still marked “TBD,” leaving an important integration gap for this Laravel library.
There were no commits and no active maintainers in the last three months, a meaningful maintenance concern despite the recent registry release history.
The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.
The only workflow lacks top-level token permissions. No write permissions were observed, but explicitly restricting workflow permissions would provide stronger CI security hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 17 days ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.