Clear documentation, tests, release notes, and an MIT license support routine adoption. No security policy or repository security scanning is visible, leaving disclosure and ongoing security practices less clear.
65%
Total Score
50
100
83
83
The package is only 95 days old with four releases, all within the last 12 months. This shows active initial publishing but provides limited evidence of long-term maintenance.
One contributor made all four commits in the last three months, creating a concentrated maintenance dependency with no demonstrated handoff capacity.
The repository had four commits in the last three months, indicating some activity, but all activity came from one maintainer and the volume is still modest.
The repository has zero stars, forks, and watchers. For a package this young, that is limited supporting evidence rather than proof of poor quality, but it leaves adoption and community validation unestablished.
Composer build tooling is present, but no repository security-scanning tool was detected. This is a security-process gap, though it is not evidence of a vulnerability.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.0|^3.0 | — | — |
illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.