Usable with caveats: the release is clearly backed by a matching repository, includes tests and release notes, and is not deprecated or archived. However, it was first published today, has no demonstrated maintenance history, relies on one maintainer, and lacks a security policy and explicit workflow permissions.
68%
Total Score
67
50
83
75
The package has 13 runtime dependencies, including Laravel components, Guzzle, and required PHP extensions; this is a meaningful integration surface but not inherently excessive for a Laravel package.
Only one registry account has publish access. That is a limited maintainer base for continuity, although the matching user-owned repository provides some direct ownership context.
The package is only 0 days old with four releases published over roughly 3 hours, so there is not yet enough history to demonstrate sustained maintenance or release stability.
There are no commits or active maintainers recorded over the last 3 months, but the repository and package are only 0 days old, so this currently reflects limited history rather than demonstrated abandonment.
The repository has no stars, forks, or watchers. Because the package was published only 0 days ago, this is weak maturity evidence rather than a standalone adoption blocker.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/uri Version ^7.5 | — | — |
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/cache Version ^12.0|^13.0 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
illuminate/console Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.