It includes tests, a changelog, detailed contract documentation, and a matching MIT license. The pre-1.0 status, single published release, and unpinned workflow actions leave modest longer-term and build-reproducibility concerns.
79%
Total Score
83
100
81
83
The repository is owned by an individual account rather than an organization, so the small two-person contributor base has no visible organizational handoff support.
This is a young package, 61 days old, with only one release and no established release interval, so long-term maintenance consistency is not yet demonstrated.
Composer build tooling is used, but no security scanning tools were detected, leaving a modest gap in automated security hygiene.
The repository has no security policy, so the process for privately reporting and handling vulnerabilities is not documented.
Version 0.1.0 is not a stable major release, and the package documentation says the payload contract may change in minor versions; consumers should expect API churn.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.