Usable with caveats: this is a very small, early-stage package with only two releases and no commits in the last three months. It has a clear MIT license, documentation, and no install-time scripts, but maintenance and security transparency are limited.
56%
Total Score
50
79
75
The package has only two releases, both published about 303 days ago within minutes of each other, with no later release activity shown. That leaves its longer-term maintenance uncertain.
The repository recorded zero commits and zero active maintainers during the last three months. For a package released only about 303 days ago, that is a meaningful sign of limited ongoing maintenance.
Composer build tooling is present, but no security scanning tools were detected. This is a transparency and maintenance gap, though not by itself evidence that the package is unsafe.
No security policy was found in the repository, leaving vulnerability-reporting expectations undocumented.
Version v0.0.2 is not marked as a prerelease, but the 0.x major version indicates an early-stage API that may change substantially.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.