The repository includes tests, a changelog, a security policy, and pinned workflow actions. It is a young package with one release and modest popularity, so longer-term durability remains unproven.
82%
Total Score
67
100
94
83
The package runs a post-autoload-dump lifecycle script, which adds install-time behavior, but this alone is not evidence of unsafe or excessive setup activity.
The package and repository are owned by the same individual, so the source linkage is coherent, though it does not provide organizational maintenance redundancy.
The package is 96 days old and has only one release, so its longer-term maintenance record is not yet established.
Two contributors are active, but the leading contributor made about 65% of recent commits, leaving some concentration risk for a user-owned project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.0|^12.0|^13.0 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
league/commonmark Version ^2.8.2 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.