honed/persist
The repository has tests, release notes, an MIT license, and organizational backing. Maintenance is thin, with only two commits from one contributor in three months, while workflows use broad permissions and unpinned actions.
64%
Total Score
67
100
86
50
Health Score Breakdown
The package runs a post-autoload-dump install-time script. This is common Composer behavior, but it adds execution during installation and deserves more scrutiny than a package without lifecycle scripts.
The package is 444 days old with five releases, but only one release in the last 12 months; the clustered release history suggests a slower current cadence.
One contributor made all commits in the last three months, creating a concentrated maintenance dependency. Organization backing provides some capacity for handoff, but no second recent contributor is shown.
Only two commits were recorded in the last three months, indicating limited recent maintenance activity even though the repository remains active.
The repository has no security policy, leaving reporting and response expectations undocumented for consumers.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joshua Wallace |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^12.0||^13.0 | — | — |
illuminate/contracts Version ^12.0||^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.