The package has clear documentation, repository tests, release notes, and no install-time scripts. The license mismatch and single active contributor leave some maintenance and transparency risk.
71%
Total Score
83
50
81
75
The package has 15 runtime dependencies, including several Laravel components and Symfony Process; this is a substantial integration surface but is consistent with an Artisan installer package.
The artifact declares MIT and includes a license file, but the detected text is MIT-0, which does not match the declaration and creates a licensing clarity concern.
The package is young at 54 days, with 11 releases concentrated over roughly 1.5 hours between releases; this shows activity but leaves limited evidence of long-term maturity.
All 14 recent commits came from one contributor, so maintenance continuity depends heavily on that person. Organization ownership provides some handoff capacity but does not remove the concentration risk.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1|^2.0|^3.0 | — | — |
illuminate/auth Version ^11.0|^12.0|^13.0 | — | — |
illuminate/http Version ^11.0|^12.0|^13.0 | — | — |
illuminate/view Version ^11.0|^12.0|^13.0 | — | — |
laravel/prompts Version ^0.1.18|^0.2.0|^0.3.17 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.