The README is thorough and the package has a small runtime dependency surface. It is a young, single-maintainer project with no security policy or automated security scanning.
58%
Total Score
50
100
83
50
One registry maintainer is consistent with an individually owned project, but it leaves little visible publishing capacity if that maintainer becomes unavailable.
The package is only 187 days old and has two releases, both published on the same day, so its maintenance track record is limited.
The repository recorded zero commits and zero active maintainers in the last three months, leaving current maintenance un demonstrated beyond its initial release period.
The repository has zero stars, forks, and watchers. This is supporting evidence rather than a verdict, but it provides no external adoption signal for this young package.
Composer is used for the build, but no security scanning tools are configured, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.