Usable with caveats: this is a new package with only 50 days of history and all recent repository work coming from one contributor. It is backed by an organization and has strong basic project hygiene, including tests, documentation, a license, security policy, and read-only CI permissions.
68%
Total Score
67
86
100
The package is only 50 days old with four releases, so its long-term maintenance record is not yet established. The recent release activity is a positive sign, but it does not compensate fully for the limited history.
One contributor made all seven recent commits, creating a real continuity risk. The organization-owned repository provides some capacity to hand maintenance off, but no second active contributor is evidenced.
Seven commits were made in the last three months, showing recent maintenance. However, the activity is still limited for a security-sensitive integration package.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/cache Version ^12.0|^13.0 | — | — |
psr/simple-cache Version ^3.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/session Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.