This is a very new, pre-1.0 package with only two releases over roughly 18 hours, so its long-term maintenance and compatibility are not yet established. The linked repository is active and unarchived, has repository tests, a changelog, security policy, Composer tooling, Dependabot, and no analyzed dangerous workflow patterns; the repository also explicitly mentions the package, reducing concern about repository ownership. However, the repository currently has no measured commit activity, the package has no popularity or issue history, one registry maintainer is listed, and one workflow grants top-level write permissions. It is reasonable to evaluate for controlled use, but developers should expect API churn and limited evidence of sustained maintenance.
68%
Total Score
63
100
83
80
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^12.0||^13.0 | — | — |
knuckleswtf/scribe Version ^5.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.