The MIT license, README, release notes, and matching organization repository provide good transparency. Workflow references are unpinned, and no security policy is present.
67%
Total Score
67
88
75
The package has existed for about 6 years 8 months with 7 releases, but only 1 release in the last 12 months and a median interval of about 128 days indicate a slow cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance and abandonment concern despite the recent release.
There were no new or closed issues or pull requests in the last month, while 3 issues remain open; this adds modest evidence of limited current activity.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest supply-chain hygiene gap.
No repository security policy was found, so the process for reporting and handling vulnerabilities is unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^3.0 | — | — |
illuminate/support Version ^12.0 | — | — |
illuminate/database Version ^12.0 | — | — |
illuminate/contracts Version ^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.