The project includes release notes, repository tests, a license, and a security policy. Install-time scripts can alter the environment, so inspect them before adopting.
67%
Total Score
50
94
75
post-install-cmd and post-update-cmd scripts run during dependency operations, creating additional installation behavior that deserves review for a system-management CLI.
The package is only 36 days old and has one release, so there is not yet enough history to establish a durable maintenance pattern.
All four recent commits came from one contributor, leaving maintenance dependent on a single person in this user-owned project.
Four commits in the last three months show recent activity, but the small volume is not yet enough to demonstrate sustained maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mnapoli/silly Version ^1.9 | — | — |
symfony/process Version ^7.0 | — | — |
nategood/httpful Version ^1.0 | — | — |
illuminate/container Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/collections Version ^11.4 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.