The package has useful documentation, a license, repository tests, a changelog, and a security policy. Pin v0.5.0 while its maintenance record and contributor base mature.
68%
Total Score
67
81
83
The registry namespace and repository are owned by the same individual account, so the package has direct ownership alignment but no demonstrated organizational backing.
The package is only 2 days old, despite 9 releases in that period. This shows active initial development but provides little evidence of long-term maintenance.
One contributor made all 23 recent commits, creating a clear single-maintainer continuity risk. No organizational backing is shown to compensate for that concentration.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap rather than a severe concern for a newly published package.
v0.5.0 is not a stable major release, and the README warns that minor releases may change things before 1.0. Consumers should expect breaking changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.8|^8.0 | — | — |
livewire/livewire Version ^3.8.3|^4.3.4 | — | — |
illuminate/console Version ^12.69.2|^13.32 | — | — |
illuminate/support Version ^12.69.2|^13.32 | — | — |
illuminate/contracts Version ^12.69.2|^13.32 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.