Usable with caveats: the package is clearly identified, licensed, documented, and not deprecated or archived. It is a young, single-maintainer project with no commits for about 10 months, no tests, and no security policy, so long-term maintenance is uncertain.
52%
Total Score
50
100
83
75
Only one registry account has publish access. That is a meaningful continuity risk for an individual-owned package, particularly when commit activity is also absent.
The registry namespace and repository are both backed by the same individual rather than an organization. That makes the single-maintainer continuity concern more material.
The package published 9 releases within its first 16 days, but has had no release for about 10 months afterward. This suggests an initial burst followed by uncertain ongoing maintenance.
There were zero commits and zero active maintainers in the last 3 months, consistent with roughly 10 months since the latest release. This is the strongest maintenance concern for depending on the package.
The repository has zero stars, forks, and watchers. Popularity is not required for a healthy package, but the complete lack of visible adoption provides no supporting evidence of maturity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
botman/botman Version ^2.6 | — | — |
botman/driver-web Version ^1.5 | — | — |
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.