The package includes tests and a readable setup guide, and it is not deprecated or archived. Install-time scripts, no security tooling, and a README that describes another project reduce transparency.
48%
Total Score
0
71
50
This package has only one release, published 419 days ago, with no releases in the last 12 months. That leaves maintenance and compatibility maturity unproven.
The repository recorded zero commits and zero active maintainers in the last three months. The single historical release does not compensate for this lack of current activity.
Five install and update lifecycle scripts run automatically, increasing setup complexity and the amount of package behavior that occurs during installation. This is a meaningful transparency and review concern for a scaffold package.
The repository name matches the package, but its README does not mention the package and instead describes a different application. That weakens confidence that the published artifact is transparently represented by its source.
The repository uses Composer but reports no security scanning tools. Build tooling is present, but the absence of automated security checks reduces maintenance assurance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/reverb Version ^1.0 | — | — |
laravel/tinker Version ^2.10.1 | — | — |
laravel/horizon Version ^5.33 | — | — |
laravel/sanctum Version ^4.0 | — | — |
laravel/framework Version ^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.