Laravel Package for Infoflot PHP Client
68%
Total Score
63
100
88
50
Only one registry maintainer is listed. That is consistent with a small user-owned project but leaves limited publishing continuity if that maintainer becomes unavailable.
The repository is owned by an individual user rather than an organization, so the single-maintainer and concentrated-contributor risks are not offset by visible organizational backing.
All three recent commits came from one contributor, so maintenance depends entirely on a single person despite the recent activity.
Composer is used for builds, but no security scanning tools are present. This is a modest transparency and assurance gap for a package handling API credentials.
The repository has no security policy, leaving no documented process for reporting or handling security issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
cryptoweb/infoflot-api Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.