Usable with caveats: it has a clear MIT license, substantial documentation, tests, and a matching source repository, but this is a very young v0 package with only three releases over roughly 12 hours and no demonstrated activity after its initial publication. A single maintainer and limited repository security hygiene add dependency risk.
62%
Total Score
50
50
72
80
Seven runtime dependencies are declared, including Laravel components, Guzzle, PSR logging, and Symfony HTTP Foundation. This is a meaningful integration surface for a small pre-1.0 SDK but is broadly consistent with its stated Laravel role.
Only one registry account has publish access. The matching user-owned repository provides some accountability, but the single-person maintainer base leaves limited redundancy if the maintainer becomes unavailable.
The package and repository are both owned by the same individual account, so the source identity is consistent. It is not organization-backed, which offers less institutional continuity than an organization-owned project.
The package is only about 50 days old and has three releases, all clustered within roughly 12 hours; this provides little evidence of sustained maintenance or long-term release discipline.
There are no open issues or pull requests and no activity in the last month. With a repository only about 50 days old, this does not prove abandonment, but it provides no evidence of an active feedback or maintenance cycle.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1|^2.0|^3.0 | — | — |
illuminate/http Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
guzzlehttp/guzzle Version ^7.5 | — | — |
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.