The package has clear documentation, release notes, repository tests, and an MIT license. Its young project history provides limited evidence of sustained maintenance, while workflow hygiene needs attention.
61%
Total Score
50
100
89
75
The package uses a post-autoload-dump install-time script, adding execution during Composer installation and therefore a modest supply-chain hygiene concern.
The registry namespace and repository are owned by the same individual account, providing direct ownership alignment but no organizational backing.
Eight releases appeared over roughly three days, showing active initial iteration but too little history to establish long-term maintenance.
The repository recorded zero commits and zero active maintainers during the last three months, leaving sustained maintenance unproven for this young package.
There were no new or closed issues in the last month and one open pull request, indicating limited recent project interaction but not abandonment by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.0||^12.0||^13.0 | — | — |
league/flysystem Version ^3.0 | — | — |
illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
pcloud/pcloud-php-sdk Version ^3.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.