The package has thorough documentation, tests, a changelog, and a release note for this version. Its maintenance track record is still unproven, and all seven workflow actions are unpinned; the repository otherwise uses read-only permissions and passed the audit.
68%
Total Score
50
100
83
75
The repository is owned by an individual user rather than an organization, so there is no organizational backing to offset the single-publisher and short-history concerns.
This package is only 0 days old with two releases, so there is not yet enough release history to demonstrate sustained maintenance. The rapid second release is a small positive but does not establish a long-term track record.
The repository has zero commits and zero active maintainers in the last three months, but the package itself is only 0 days old. This is best treated as missing maintenance history rather than evidence of abandonment.
The repository has zero stars, forks, and watchers. For a package released 0 days ago this is unsurprising, but it provides no independent adoption signal yet.
Composer build tooling is present, but no security scanning tools were detected. The missing scanner is a modest repository-hygiene gap, not evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.33.2 || ^12.0.1 || ^13.0 | — | — |
illuminate/cache Version ^11.33.2 || ^12.0.1 || ^13.0 | — | — |
guzzlehttp/guzzle Version ^7.8.2 || ^8.0 | — | — |
illuminate/support Version ^11.33.2 || ^12.0.1 || ^13.0 | — | — |
illuminate/contracts Version ^11.33.2 || ^12.0.1 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.