The package includes an MIT declaration and a real test suite, which make its current contents easier to evaluate. Install and update hooks add operational complexity for consumers.
55%
Total Score
50
80
50
The package defines post-install and post-update Composer scripts. These may be legitimate setup hooks, but they add execution and maintenance complexity for every consumer.
The artifact contains tests and the repository also has tests, which is a positive quality signal. However, no README is included for a package consumers must integrate, leaving an important usability gap.
The package is about 203 days old with three releases, all clustered within roughly 12 hours; that shows initial activity but little evidence of a sustained release pattern.
There were no commits and no active maintainers in the last three months. Because the project is still young, this is meaningful abandonment risk rather than proof that it is unmaintained.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dedoc/scramble Version ^0.13.0 | — | — |
nikic/php-parser Version ^5.0 | — | — |
laravel/framework Version ^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.