It has a clear MIT license, tests in the source repository, security guidance, and build tooling. Installation scripts modify the local environment, so deployment should be deliberate.
86%
Total Score
100
100
75
The package runs post-install and post-update scripts, which is expected for a system-oriented CLI that configures local services, but it increases installation complexity and warrants deliberate deployment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mnapoli/silly Version ~1.1 | — | — |
symfony/process Version ~2.7|~3.0|~4.0|~5.0|^6.0|^7.0 | — | — |
nategood/httpful Version ~1.0 | — | — |
tightenco/collect Version ~5.3|^6.0|^7.0|^8.0|^9.0 | — | — |
illuminate/container Version ~5.3|^6.0|^7.0|^8.0|^9.0|^10.0|^11.00|^12.00 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.