The package has clear licensing, a usable README, stable versioning, and no install-time scripts. Recent maintenance is thin: only one commit in the last three months from one contributor, with no security policy.
62%
Total Score
50
100
94
75
The repository is owned by a user rather than an organization, so the single-contributor concentration is not offset by visible organization backing.
The package is young at 205 days and has 11 releases, but the latest release was about 80 days before collection after a concentrated burst of releases, leaving current maintenance less certain.
One contributor made 100% of the commits in the last three months, leaving maintenance dependent on a single person.
Only one commit was recorded in the last three months from one active maintainer, which is weak evidence of ongoing maintenance for a package intended for integrations.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities, although this is a smaller concern than the maintenance concentration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.0|^3.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^10.0|^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.