The project has organization-owned backing, repository tests, a changelog, and a stable MIT license. Its workflows leave all six actions unpinned and provide no security policy, so maintenance and build hygiene deserve care.
56%
Total Score
67
100
88
67
The package has had no registry release in more than three years, despite 16 releases overall; this is meaningful evidence of reduced maintenance for a framework integration.
There were no commits and no active maintainers in the past three months, which is a concrete maintenance concern and reinforces the long gap since the latest release.
There were no newly opened or closed issues or pull requests in the past month, while two issues and four pull requests remain open; this suggests limited recent project responsiveness.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.2 || ^7.0 | — | — |
illuminate/support Version ~5.5 || ~6.0 || ~7.0 || ~8.0 || ~9.0 || ~10.0 | — | — |
illuminate/notifications Version ~5.5 || ~6.0 || ~7.0 || ~8.0 || ~9.0 || ~10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.