Its MIT licensing, README, and active source repository make adoption easier. Limited usage, one-person contribution, and no security policy leave weaker evidence of long-term support.
62%
Total Score
50
50
78
50
Seven runtime dependencies, including Laravel components and React packages, create a meaningful dependency surface for this integration package but are not excessive for its stated functionality.
Only one registry account, Khody, can publish the package. This is a limited publishing base, though the repository activity confirms that the same owner is actively maintaining it.
The repository is owned by an individual user rather than an organization, so there is no organizational maintenance backing to offset the concentrated contributor base.
There are 16 releases in 226 days, but the median interval is about 39 minutes, indicating a burst-heavy history rather than a clearly measured release cadence.
All two recent commits came from one contributor, giving the project a single-person maintenance dependency with no demonstrated handoff capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
react/socket Version ^1.15 | — | — |
react/promise Version ^2.9 || ^3.0 | — | — |
react/event-loop Version ^1.5 | — | — |
illuminate/events Version ^9.0 || ^10.0 || ^11.0 || ^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.