The package includes extensive documentation, a matching repository, tests in source, and a security policy. Its maintenance history is too new to establish durability, and all 13 workflow actions are unpinned.
68%
Total Score
50
100
94
67
The package runs a post-autoload-dump lifecycle script during installation. This adds install-time behavior and deserves review, but it is not severe on its own.
One registry maintainer is consistent with a user-owned project, but it provides limited publishing redundancy.
The registry namespace and repository belong to the same individual account, so ownership is clear, though there is no organizational backing shown.
This release is from a package first published today, with 15 releases compressed into the same day and a zero-day median interval. That shows active initial publishing but provides no evidence of sustained maintenance yet.
No commits or active maintainers were recorded in the three-month window. Because the project was first released today, this is mainly a lack of established history rather than proof of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version ^7.4|^8.0 | — | — |
illuminate/console Version ^13.0 | — | — |
illuminate/process Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.