DeltaT lookup, sourced from https://maia.usno.navy.mil or fallback
54%
Total Score
caution
A same-day release history, no observed commits, and a repository/package identity mismatch make this new package hard to trust.
A post-autoload-dump install-time script runs during Composer operations, adding execution and maintenance surface beyond ordinary dependency installation.
A single registry publisher is consistent with an individual project, but it provides limited publishing redundancy and little evidence of a broader maintainer base.
The artifact contains source files, tests, configuration, and a license, but no README; that makes consumer integration less transparent for this library.
The package includes tests, which supports basic quality, but it has no README for consumers and no changelog or release notes; the missing changelog is normal packaging practice.
The registry namespace is patrickfischer while the linked repository is owned by the unrelated-looking user zero0cool0; the ownership mismatch reduces confidence in project provenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^3.11 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.