Its small scope and straightforward Composer build keep the adoption burden limited. Maintenance evidence is thin: only two releases appeared on one day, with no commits in the past three months. The repository also lacks tests and security scanning, so future changes deserve extra scrutiny.
58%
Total Score
50
83
83
One registry publishing account is present. Because the repository is user-owned rather than organization-backed, the narrow publishing base provides limited resilience if that maintainer becomes inactive.
The package is 245 days old but has only two releases, both published within one day, leaving little evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the past three months, a meaningful sign of limited ongoing maintenance for a package released less than a year ago.
The repository has zero stars, forks, and watchers. This is supporting evidence of a very small project, but popularity alone does not determine whether a small package is healthy.
Composer build tooling is present, but no security-scanning tool is configured. That is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version @stable | — | — |
illuminate/events Version ^7.0 | — | — |
symfony/filesystem Version ^5.0.0 | — | — |
illuminate/database Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.