Usable with caveats: the release is clearly licensed, documented, and backed by a matching repository, but it has only one release and very little evidence of an established user or maintenance base. The repository also lacks security policy and scanning, so adoption should include your own review and monitoring.
66%
Total Score
67
100
83
83
The registry namespace and repository owner match, and the repository is user-owned rather than organization-owned; this supports identity consistency but provides limited institutional backing.
This is a young release line with one release in about 100 days and no demonstrated release cadence yet, which limits evidence of maturity and ongoing maintenance.
There are no open issues or pull requests and no recent issue or merge activity. With only one release, this provides little evidence of active maintenance, although it also shows no unresolved public backlog.
The repository has zero stars, forks, and watchers, offering no supporting evidence of community adoption or external review; this is a maturity concern but not decisive by itself.
Composer is used for the build, which fits the PHP package, but no security-scanning tools are present, reducing automated supply-chain oversight.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/fractal Version ^0.19.0|^0.20 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.