Usable with caveats: this is a brand-new v0.2.0 package with no demonstrated commit activity yet. It has clear licensing, documentation, tests and security tooling, but the linked repository does not match the package name or mention it in its README.
58%
Total Score
50
79
100
The package is less than one day old and has only two releases, so there is not enough history to establish mature maintenance or release reliability.
The repository records zero commits and zero active maintainers over the past three months; because the project is newly published, this is limited evidence of abandonment but still leaves maintenance capacity unproven.
The repository name does not match the package name and its README does not mention the package, creating a concrete concern that the repository may not be the actual source for this release.
v0.2.0 is not a stable major release, which indicates an early API and a higher likelihood of breaking changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0||^13.0 | — | — |
guzzlehttp/guzzle Version ^7.8.2 || ^8.0 | — | — |
illuminate/support Version ^12.0||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.