Documentation and test coverage support integration. Security policy and action pinning are weak, while the workflow audit found no active dangerous patterns.
72%
Total Score
60
100
89
67
One registry publisher is listed, which is consistent with the individually owned repository but leaves limited publishing redundancy.
The repository is owned by the same individual namespace as the package, providing direct ownership alignment but no organization-level maintenance backing.
The package has existed for 2,796 days with 56 releases, but only 2 releases in the last 12 months; this indicates established history with a currently modest cadence.
One contributor made all commits in the last 3 months, concentrating recent maintenance in a single person; the individual-owned project backing does not provide organizational handoff compensation.
Only 1 commit was recorded in the last 3 months, so recent maintenance activity is limited despite the current release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lcobucci/jwt Version ^5.0 | — | — |
laravel/passport Version ^13.0 | — | — |
laravel/socialite Version ^5.0 | — | — |
nuwave/lighthouse Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.