The package has clear licensing, documentation, tests in the repository, release notes, and a security policy. It is newly published with only two releases and no recorded commits or active maintainers in the last three months, so long-term maintenance is unproven.
68%
Total Score
88
100
89
88
The package uses a post-autoload-dump install-time script. This adds installation behavior to review, but the signal provides no evidence that the script is unsafe or unusually invasive.
The package is less than one day old and has only two releases, so there is not yet enough history to demonstrate sustained maintenance or release reliability.
No commits or active maintainers were recorded in the last three months. Because the package is newly published, this mainly shows that long-term maintenance capacity is not yet established rather than proving abandonment.
The repository has no stars, forks, or watchers. This provides little adoption evidence, but popularity is supporting evidence and does not by itself indicate poor package health.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^13.0 | — | — |
linkado-ru/php-sdk Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.