A complete README, repository tests, and matching license improve confidence. No security policy or scanning tooling leaves maintenance and security practices less transparent.
61%
Total Score
50
100
79
50
The package has only one release over about nine months, so there is little release history to demonstrate sustained maintenance or compatibility discipline.
All three recent commits came from one contributor, leaving maintenance dependent on a single active person.
Three commits in the last three months show recent activity, but the volume is modest and does not yet establish a strong maintenance track record.
Composer build tooling is present, but no security scanning tooling was detected, reducing automated coverage for dependency and repository risks.
The repository has no security policy, so users lack documented guidance for reporting vulnerabilities and understanding the project's security response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aplus/http Version ^4.5 | — | — |
illuminate/validation Version ^12.43 | — | — |
illuminate/translation Version ^12.43 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.