Usable with caveats: the package is clearly documented, tested, licensed, and actively developed, but it is very young and all recent work comes from one contributor. Its lack of security tooling and very small user base add uncertainty for a production dependency.
68%
Total Score
60
100
78
90
Only one registry account has publishing access. This is a real continuity concern for a user-owned project, though repository activity shows that the maintainer is currently active.
The registry namespace and repository owner match, but the owner is an individual account. This supports ownership consistency while offering no organizational backing to compensate for the single-maintainer base.
The package is only 49 days old, although it has already had 11 releases in that period. This shows active iteration but provides limited evidence of long-term stability.
One contributor made all 14 recent commits, creating a high bus-factor risk. The repository is user-owned rather than organization-backed, so there is no provided evidence of a handoff path to offset that concentration.
There are no open issues or pull requests and no recorded activity in the last month. This is not evidence of abandonment by itself, especially for a new package, but it provides little independent evidence of community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mpdf/mpdf Version ^8.2 | — | — |
illuminate/view Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
pat-o-dev/factur-x Version ^0.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.