The package is clearly documented and licensed, with recent releases and a matching source repository. Maintenance depends on one contributor, and the repository has no security policy or automated security scanning.
68%
Total Score
67
50
89
83
The package declares 9 runtime dependencies, including Laravel, Lighthouse, PHPUnit, and GraphQL libraries. This is a broad but relevant dependency surface for an integration-testing package and adds some upgrade coupling.
The repository is owned by an individual account rather than an organization. Combined with the single active contributor, this provides limited demonstrated maintenance redundancy.
All 4 recent commits came from one contributor, giving the project a single-person maintenance dependency. No second active contributor is shown to provide continuity.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this lowers external validation modestly but does not outweigh the active release history.
Composer build tooling is present, but no security scanning tools are reported. The build is defined, while security-oriented automation is limited.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^13.0.0 | — | — |
nuwave/lighthouse Version ^6.66.0 | — | — |
webonyx/graphql-php Version ^15.32.3 | — | — |
illuminate/contracts Version ^13.10.0 | — | — |
illuminate/filesystem Version ^13.10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.