A clear license, strong documentation, release notes, tests in the repository, and active recent work support adoption. All recent commits come from one developer, and the Composer install hook warrants checking before use.
80%
Total Score
88
100
83
The package defines a post-autoload-dump Composer lifecycle script. This is a normal Composer hook, but it adds install-time execution that developers should understand.
All 8 recent commits came from one contributor, giving the project a concentrated maintenance base despite its organization ownership.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^12.20|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.