The repository is organized, documented, and backed by an organization. MIT licensing and matching package metadata improve transparency, while the small release history and limited security process leave less evidence of long-term maturity.
69%
Total Score
67
75
50
A post-autoload-dump lifecycle script runs during Composer installation, adding an install-time execution surface that developers should understand before adoption.
The package is only 64 days old with three releases, all within about two days, so there is too little history to demonstrate sustained maintenance.
All three recent commits come from one contributor, concentrating practical maintenance knowledge; organization backing provides some ability to hand work off, but no second active contributor is shown.
The repository has three commits in the last three months, showing recent activity but only a modest maintenance record for a package that is still very young.
Composer build tooling is present, but no security-scanning tools were detected, leaving less automated evidence of dependency and code hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
larablocks/map-ai Version ^0.1.7 | — | — |
illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.