The repository includes tests, a detailed README, matching source, and an MIT license. No install-time scripts and only three runtime dependencies are reassuring, while the zero-star history offers little evidence of adoption yet.
67%
Total Score
100
79
67
The package is only 1 day old with 4 releases, so it has almost no demonstrated maintenance history despite active publishing over the past day.
Composer build tooling is present, but no security scanning tools were detected, reducing evidence of ongoing dependency and code-risk monitoring.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Version v0.4.0 is not a stable major release, and the README identifies the project as 0.x with possible API changes before 1.0.0.
No GitHub Actions workflows were present, so the audit found no workflow hazards; this also provides no evidence of automated CI or release checks.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.