larago/socket
The package is well documented, licensed, and backed by a matching source repository with a security policy. Its install and update scripts, lack of security scanning, and no recorded commits in the last three months warrant caution for a new package.
58%
Total Score
50
100
88
83
Health Score Breakdown
The package runs post-install and post-update Composer scripts, which increases installation-time behavior and operational exposure. No provided signal shows these scripts are unsafe, so this is a moderate hygiene concern rather than a severe finding.
All 8 releases were concentrated within roughly one day, and the latest release was about 5 months ago. This shows initial activity but little evidence of an ongoing release cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. For a package only about 5 months old, that is a meaningful maintenance concern.
Composer build tooling is present, but no security scanning tools were detected. The missing automated security coverage reduces transparency for a package that builds and runs a Go-backed service.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Malik Bilal |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.