laravel integration with Visma Spiri api
63%
Total Score
70
100
78
90
Only one registry account has publish access. This is a resilience concern for an individually owned package because publishing continuity depends on a single person.
The artifact and repository include tests, and GitHub Releases provide some release communication; however, the README is only 21 characters and there is no changelog, leaving documentation transparency weak.
The source repository is owned by an individual user rather than an organization, so there is no organizational backing shown to compensate for the single-maintainer concentration.
The package has 22 releases in only 18 days, showing active iteration but an unusually short 18-day history and insufficient evidence of sustained maintenance.
One contributor made all 25 commits in the last three months, with a 100% top-contributor share. Because the repository is user-owned rather than organization-owned, this is a meaningful maintenance-continuity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.15 | — | — |
laravel/socialite Version ^5.30 | — | — |
illuminate/contracts Version * | — | — |
spatie/laravel-package-tools Version ^1.93 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.