Power of AI Agents in your Laravel project
68%
Total Score
50
50
100
75
Eight runtime dependencies, including several AI-provider clients and Laravel components, create meaningful dependency surface area for a framework package, though the profile is not unusually large for its scope.
The package runs a post-autoload-dump install-time script. This adds execution during installation and warrants attention, although the signal does not show that the script is harmful.
The package and repository are owned by the same individual account rather than an organization, so the single-maintainer and single-contributor concentration is not visibly offset by organizational backing.
One contributor made all one recent commit, leaving the observed three-month activity concentrated in a single person and increasing continuity risk.
Only one commit was recorded in the last three months, despite the broader release history, so current maintenance activity is thin.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.9 | — | — |
openai-php/client Version ^0.19.2 | — | — |
mozex/anthropic-php Version ^1.1 | — | — |
illuminate/contracts Version ^10.0||^11.0||^12.0||^13.0 | — | — |
lucianotonet/groq-php Version ^1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.