The repository includes tests, a changelog, release notes, and a security policy. Its very recent history, solo maintenance, and workflow template-injection warning leave limited evidence of long-term reliability.
64%
Total Score
50
100
89
67
A post-autoload-dump install script adds some installation-time behavior that consumers should understand, though this is not by itself evidence of abandonment.
The package is maintained under an individual account rather than organization backing, so the single-person maintenance model offers limited continuity.
The package was first released today and has only two releases, so there is little evidence of sustained maintenance or release stability.
No commits or active maintainers were recorded in the prior three months. Because the package was released today, this mainly reflects limited history rather than proven abandonment.
The repository has one star and no forks, so there is little community evidence to supplement the otherwise promising project files; its same-day age limits how much this matters.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^7.0|^8.0 | — | — |
illuminate/view Version ^11.0|^12.0|^13.0 | — | — |
illuminate/console Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.