This release presents a generally healthy dependency profile: it has a nearly five-year release history with 179 releases and 26 releases in the last 12 months, is stable and not deprecated, and the repository was pushed very recently. The package and repository include substantial documentation, tests, a changelog, licensing, security policy, dependency scanning, and a read-only CI token configuration. The main concern is maintenance concentration: all 16 commits in the last three months came from one contributor, and issue and pull-request activity was dormant during the last month. That creates a meaningful bus-factor risk, but it is offset by continued releases, recent commits, a coherent matching repository, and strong project hygiene.
82%
Total Score
60
100
100
100
Only one account has registry publish access, which is a modest publishing resilience concern; however, the repository is user-owned and recent release and commit activity show that the maintainer is active.
The repository is owned by the individual user damms005 rather than an organization, so there is no organizational handoff evidence to offset the concentrated maintainer base.
Only one contributor made commits during the last three months, holding 100% of the commit share. Continued activity is reassuring, but this concentration creates a genuine single-maintainer continuity risk.
There were no new or closed issues or pull requests in the last month, while one issue and two pull requests remain open. This is a minor sign of limited community activity, though it is partly compensated by recent commits and releases.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.3 | — | — |
illuminate/support Version ^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
yabacon/paystack-php Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.