Usable with caveats: it is a small, clearly documented Laravel package with tests, an MIT license, and no deprecation or risky install scripts. However, it is very new, has had no commits in three months, has no users or security tooling, and is maintained by one person.
58%
Total Score
50
100
78
83
The package and repository are owned by the same individual account, which is consistent backing, but it does not provide organizational redundancy.
Only two releases have been published over about 197 days, so there is limited evidence of sustained maintenance despite the releases being close together.
There were zero commits and zero active maintainers in the last three months, a concrete sign that maintenance may have stopped after the initial release.
The repository has zero stars, forks, and watchers. This is supporting evidence of limited adoption, not a verdict by itself, but it provides no external confidence buffer for this new package.
Composer build tooling is present, but no security scanning tools are configured, leaving a transparency and review gap for a package handling authentication and invoice data.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.