The package includes tests, a usable README, a recent release, and Composer security scanning. Its small audience, absent security policy, and unpinned workflow actions reduce confidence in long-term maintenance and build hygiene.
68%
Total Score
67
100
94
75
The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the recent release and push.
There are no open issues and one open pull request, but no issues or pull requests were closed or merged in the last month, providing little evidence of active community maintenance.
The repository has zero stars and forks and one watcher, indicating limited external adoption; popularity is supporting evidence, so this is a modest caution rather than a verdict.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The sole workflow was fully analyzed without dangerous triggers or audit findings, but both action references are unpinned; the missing top-level permissions block is acceptable on its own, while unpinned actions weaken build reproducibility.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.5.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.