Usable with caveats: it has clear documentation, a matching source repository, and no deprecation or install scripts. It is very new, has had no commits for about 4 months, and provides no tests or security policy, so long-term maintenance is uncertain.
58%
Total Score
50
100
83
90
The repository recorded zero commits and zero active maintainers during the last 3 months, and its last push was about 4 months ago. For a newly released integration package, that is a meaningful warning about responsiveness and abandonment risk.
Only two releases have been published, both about 4 months ago and within roughly 2 hours of each other. This establishes little evidence of sustained maintenance beyond the initial launch.
The repository has zero stars, forks, and watchers, so there is no community adoption signal to reinforce confidence. Popularity is only supporting evidence, and the package's clear structure means this remains a caution rather than a severe risk.
Composer is used as the build tool, but no security scanning tooling is configured. This is a transparency and maintenance gap, though it is not by itself evidence that the package is unsafe.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in an integration that processes courier and webhook data.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/routing Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/database Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.