The repository has stopped committing for about 11 months, and all seven workflow action references are unpinned. Strong packaging, testing, licensing, and a matching source repository provide useful maturity and transparency, but the one-person project has limited ongoing capacity.
58%
Total Score
38
100
83
75
There were zero commits and zero active maintainers during the last three months, consistent with roughly 11 months since the last push and raising abandonment risk.
Only one registry account has publish access, which limits publishing redundancy, although the linked repository is owned by the same individual and the project is clearly matched.
The package and repository are owned by the same individual account rather than an organization, so there is no organizational backing to compensate for the thin maintainer base.
The package made 15 releases in its first year, but the latest release was about 11 months ago, indicating a sharp recent slowdown after an initially active launch.
There are no open issues or pull requests and no recent issue or pull-request activity. This is not inherently negative, but it provides little evidence of an active support community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
grok-php/client Version ^1.3 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
openai-php/laravel Version ^0.16.0 | — | — |
google-gemini-php/client Version ^2.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.