Scans uploaded files for viruses and other malware
78%
Total Score
50
100
88
90
Only one registry account has publish access, which creates publishing continuity risk; the matching repository and recent activity provide some evidence of active ownership but do not remove the single-publisher concentration.
The package and repository are owned by the same individual user account, establishing direct ownership but not the redundancy or handoff capacity of organization backing.
The package is mature and has two releases in the last 12 months, including a recent release, but its three-release history and roughly three-year median interval show an uneven cadence.
All recent commits came from one contributor, so maintenance depends entirely on that person; the repository is user-owned rather than organization-owned, so there is no provided organizational backing to offset the concentration.
There was one commit in the last three months from one active maintainer, showing recent maintenance but a very limited recent activity level.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
xenolope/quahog Version ^2.1 | — | — |
laravel/framework Version ^5.1 || ^6.0 || ^7.0 || ^8.0 || ^9.0 || ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.