The repository has tests, a changelog, a clear license, and recent commit activity. Its three-day history, pre-1.0 version, single contributor, missing security policy, and unpinned workflow actions leave limited evidence of long-term reliability.
68%
Total Score
60
100
78
75
One registry account publishes the package. This is consistent with the repository being user-owned, but it leaves little publishing redundancy.
The repository is owned by the individual user ismailnakkar rather than an organization, so the single-contributor and single-publisher concentration is not offset by organizational backing.
The package is only 3 days old and has 12 releases in that short period, so its release track is active but provides little evidence of durability or established maintenance.
All seven recent commits came from one contributor, giving the project a high maintainer concentration and increasing continuity risk if that contributor becomes unavailable.
Seven commits from one active maintainer in the last three months show current development, but the short observation window limits confidence in sustained maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^2.9 || ^3.0 | — | — |
laravel/framework Version ^12.61.1 || ^13.12 | — | — |
symfony/polyfill-intl-idn Version ^1.18 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.