This is my package theharvester-service
61%
Total Score
50
100
94
50
A post-autoload-dump install script is present, adding install-time behavior that deserves attention but is common in Composer packages and is not severe on its own.
The repository is owned by an individual user rather than an organization, so there is no visible organizational maintenance backing to offset the thin contributor base.
The latest registry release was over three years ago, with no releases in the last 12 months; this is a meaningful maintenance concern despite 14 releases overall.
One contributor made all commits in the last three months, leaving no demonstrated contributor redundancy for this user-owned project.
The repository recorded one commit in the last three months, showing some recent activity but a very limited maintenance pace.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.2 | — | — |
illuminate/contracts Version ^10.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.