Usable with caveats: it is a well-documented, tested, licensed first release with sensible dependency and build hygiene. However, the package is only 48 days old and all recent repository activity comes from one contributor, so long-term maintenance is unproven.
68%
Total Score
50
100
89
88
The package and repository are owned by the same individual account, confirming ownership alignment but offering less organizational maintenance capacity than an organization-backed project.
This is a new package with only one release in the last 48 days, so there is not yet enough release history to demonstrate sustained maintenance.
One contributor made 100% of the single recent commit, leaving maintenance highly dependent on one person and providing little evidence of continuity if that person becomes unavailable.
Only one commit was recorded during the last three months, so ongoing maintenance activity is currently thin; the recent release provides some compensating evidence but not a long track record.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this lowers confidence in external adoption signals but does not alone indicate poor health.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.