Clear documentation, an MIT license, and organization backing help adoption. Limited security tooling and a small recent activity base leave less independent assurance.
68%
Total Score
67
100
89
75
One contributor made all commits in the last 3 months. Concentration is partly offset because the repository is organization-owned, but recent maintenance still lacks independent contributor depth.
Only 1 commit occurred in the last 3 months, indicating limited recent development activity despite the current release. This lowers confidence in sustained maintenance.
The repository has 0 stars and 0 forks, with 3 watchers. This provides little external validation, although popularity is supporting evidence rather than a health verdict.
Composer build tooling is present, but no security-scanning tool was detected. The missing scanning layer is a modest transparency and assurance gap.
No repository security policy was detected. The package README provides a security contact, which partly compensates for the missing formal policy.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
javaabu/settings Version ^1.7 | — | — |
illuminate/support Version ^9.0 || ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.