Usable with caveats: this is a very new package with no demonstrated sustained commit activity yet. It has clear licensing, documentation, tests in the repository, release notes, and a matching source repository, but its long-term maintenance is unproven and workflow security hygiene is incomplete.
62%
Total Score
75
100
79
80
One registry publishing account is present; because the repository is owned by the same individual, this is consistent ownership, though it still represents a narrow maintainer base.
Three releases were published within a package age of less than one day, showing active initial publishing but no meaningful track record of maintenance over time.
The repository shows zero commits and zero active maintainers in the last three months, so sustained maintenance capacity is not yet demonstrated; the recent push and package age make this understandable but do not compensate for the missing track record.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and security-hygiene gap.
The repository has no security policy, which makes vulnerability reporting less clear for a package intended for application integrations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
egulias/email-validator Version * | — | — |
illuminate/notifications Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.