The package has clear documentation, tests, a changelog, and an MIT license. Its small dependency set and matching repository make adoption straightforward.
58%
Total Score
50
100
83
50
Only three releases exist, all within the first 11 days, and the latest release was about 11 months ago. That limited and now-stalled release history raises a maintenance concern.
There were zero commits and zero active maintainers during the last three months. For an AI integration package, this is a meaningful sign of limited current maintenance capacity.
The repository has zero stars, forks, and watchers. Popularity is not decisive, but this provides no supporting evidence of community adoption for a package with limited release history.
Composer build tooling is present, but no security-scanning tool was detected. This is a transparency and hygiene gap, not evidence that the release is unsafe.
The repository has no security policy. That leaves vulnerability reporting and response expectations unclear, which is a modest concern for a package handling external AI-provider credentials.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
thiagoalessio/tesseract_ocr Version ^2.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.