Tests, a clear README, licensing, and a recent repository push support practical use. Maintenance remains concentrated in one contributor, and the workflow uses four unpinned actions without a security policy.
64%
Total Score
60
50
88
83
Five runtime dependencies are declared, including Laravel components and an alpha PDO-mocking dependency; the profile is relevant but adds compatibility and prerelease coupling.
Only one registry account can publish releases. The matching user-owned repository and recent activity provide some support, but publishing responsibility remains concentrated.
The registry namespace and repository owner match, but both identify a user-owned project rather than an organization, so there is no demonstrated organizational maintenance cushion.
The package has existed for about 6 years but only has 7 releases, with a median interval of about 11 months and one release in the last year; this indicates slow maintenance.
All recent commits came from one contributor, leaving maintenance dependent on a single person; the repository is user-owned, so no organizational handoff evidence compensates for this.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mpyw/mockery-pdo Version 0.0.1-alpha8@alpha | — | — |
illuminate/support Version ^11.0 || ^12.0 || ^13.0 || ^14.0 | — | — |
illuminate/database Version ^11.0 || ^12.0 || ^13.0 || ^14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.