The MIT license and clean install/workflow setup reduce adoption friction. A single publisher and absent security policy leave modest process risk.
86%
Total Score
75
100
94
83
Only one registry account has publishing access, which creates some release-account concentration, although repository activity shows a second active contributor and organization backing.
One contributor made about 79% of the 39 recent commits, creating concentration risk; the second contributor remains active and the repository is organization-owned, which partly compensates.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest process gap.
No repository security policy was detected, reducing transparency about vulnerability reporting and response procedures.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^12.0 || ^13.0 | — | — |
thecodingmachine/safe Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.