Usable with caveats: the package is small and well-scaffolded, with tests, documentation, a stable release, and no deprecation or install scripts. Maintenance evidence is weak because all five releases arrived within minutes and there has been no commit activity for about six months, while the repository has almost no adoption or security process.
62%
Total Score
33
100
83
90
The repository recorded zero commits and zero active maintainers in the last three months, matching the stale release history and creating a meaningful abandonment risk.
The registry namespace is associated with an organization name, but the linked repository is owned by an individual account. Because the repository itself matches and mentions the package, this is only a modest transparency concern rather than evidence that it is unrelated.
The package has five releases, but they were effectively published together within minutes and there has been no newer release for about six months. That provides little evidence of sustained maintenance.
There are no open issues or pull requests and no recent issue or pull-request activity. This is not inherently unhealthy for a small package, but it provides no evidence of an active support channel.
The repository has one star, no forks, and no watchers, so there is very little public adoption or independent visibility to support the project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
razorpay/razorpay Version ^2.9 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.