Healthy and actively maintained, with a strong release cadence, extensive documentation, tests, a license, and recent repository activity. The main caveats are a concentrated two-person contributor base and limited repository security hardening, including no configured security scanner and no top-level workflow permissions.
82%
Total Score
70
50
94
90
The package declares 11 runtime dependencies spanning Laravel components, HTTP clients, AI providers, queues, and process execution. This is a meaningful integration surface but not, by itself, evidence of unhealthy maintenance.
Only one registry account has publish access, which creates publishing continuity risk. However, repository activity shows a second active contributor, partially compensating for the thin registry maintainer list.
The repository is owned by an individual rather than an organization, so the two-contributor base and concentrated commit share represent genuine continuity risk rather than organization-backed handoff capacity.
Two contributors were active, but the leading contributor made about 76% of the 101 recent commits. The second contributor remains active, so this is a concentration concern rather than severe abandonment risk.
Composer build tooling is present, but no repository security scanning tools were detected. That leaves a supply-chain hygiene gap, partially offset by the repository's security policy and clean workflow-risk findings.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^2.12.3 | — | — |
illuminate/http Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
symfony/process Version ^5.4|^6.0|^7.0 | — | — |
illuminate/cache Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/queue Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.