The package is clearly documented and tested, with a matching source repository and a stable release line. Ongoing activity is limited, and the project has one registry maintainer with no security policy or scanning tooling.
68%
Total Score
67
100
89
83
Only one account has registry publishing access. The organization-backed repository makes a short registry maintainer list less concerning, but it still leaves limited visible publishing redundancy.
The repository recorded zero commits and zero active maintainers in the last 3 months. Although a release was published recently, the absence of recent development activity raises maintenance and abandonment concerns.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this does not establish a defect, but it provides little evidence of broad community use or backup.
Composer build tooling is present, but no security-scanning tools are detected. The missing scanning coverage is a maintenance and transparency weakness, though it is not a severe risk alone.
The repository has no security policy. For a small library this is a meaningful disclosure and maintenance gap, but it does not by itself make the release unfit to use.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/helpers Version ^1.7 | — | — |
illuminate/support Version ^10|^11|^12 | — | — |
illuminate/contracts Version ^10|^11|^12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.