Usable with caveats: it is a small, clearly matched MIT package with a readable artifact and no deprecation or install-time scripts. However, all three releases arrived within minutes, and the repository has had no commits from any maintainer in the past three months, with no security policy or scanning.
62%
Total Score
50
100
83
83
The registry namespace and repository owner match the same individual, providing direct ownership alignment, though there is no organization backing to broaden maintenance capacity.
The package is only 186 days old and all three releases were published within minutes on the same day, so there is little evidence of sustained release maintenance.
The repository recorded zero commits and zero active maintainers during the past three months, which is a meaningful maintenance and abandonment concern for a young package.
The repository has zero stars, forks, and watchers, providing no community adoption evidence; this is a supporting concern rather than proof that a small package is unsafe to use.
Composer build tooling is present, but no security scanning tools are configured, leaving a security-hygiene gap without making the package unfit on its own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^3.2 | — | — |
illuminate/support Version ^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.