The package has a clear README, release notes, an MIT license file, and no install-time scripts. Its small single-maintainer base and lack of releases in over a year make long-term maintenance less certain.
62%
Total Score
50
50
88
75
Five runtime dependencies, including Laravel, React Socket, the Redis protocol library, and Livewire, create a meaningful compatibility surface for this development datastore. No dev dependencies are declared, so the package's own validation setup is not evident.
Only one registry account can publish releases. The repository is user-owned, so there is no organizational backing shown to compensate for this narrow publishing base.
The package and repository are both owned by the same individual account, confirming source alignment but showing no organization-level maintenance backing.
The package has six releases, but none in the last 12 months; its latest registry release was over a year ago despite a short early release cycle. This raises maintenance and abandonment concerns.
All three recent commits came from one contributor, leaving maintenance dependent on a single person. The user-owned project backing provides no demonstrated handoff capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/socket Version ^1.16 | — | — |
laravel/framework Version ^11.31|^12.0 | — | — |
livewire/livewire Version ^3.4.9 | — | — |
clue/redis-protocol Version ^0.3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.