The package has clear usage guidance, repository tests, and a small direct dependency set. One person makes all recent commits, and the workflows use unpinned images and actions; the project is also only about 2 months old.
68%
Total Score
50
100
88
75
Only one registry account has publishing access. This is a modest publishing resilience concern, though repository activity provides evidence of an active owner.
The package and repository are owned by the same individual account, so there is no organization backing to offset the concentrated maintainer base.
Five releases in about 2 months show active initial development, but the median interval is about 21 minutes, indicating a short, bursty history rather than established release cadence.
One contributor made 100% of the 9 recent commits, leaving no demonstrated handoff capacity if that maintainer becomes unavailable.
The repository had 9 commits in the last 3 months, showing recent activity, but all commits came from one contributor.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^3.13 | — | — |
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
hekmatinasser/jalali Version ^8.2.3 | — | — |
illuminate/validation Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.