The package is clearly documented, licensed, and has tests in the repository. Its small audience and missing security policy leave less independent oversight.
58%
Total Score
50
100
89
50
The repository is owned by an individual rather than an organization, so the single-contributor concentration carries more weight and has no shown organizational handoff capacity.
The package has 18 releases over about 22 months, but none in the last 12 months and the latest registry release was about 13 months ago, which raises maintenance concerns.
One contributor made all 3 recent commits, leaving maintenance dependent on a single active person.
Only 3 commits were made in the last 3 months, so repository activity is present but limited and does not fully offset the lack of recent releases.
The repository has 3 stars, no forks, and 1 watcher, providing little independent adoption or review evidence; popularity is supporting evidence rather than a verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
firebase/php-jwt Version ^6.0 | — | — |
saloonphp/saloon Version ^3.10 | — | — |
illuminate/contracts Version ^11.0||^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16|^2.0 | — | — |
jordanpartridge/conduit-interfaces Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.