The package includes tests, a clear README, and only three runtime dependencies. It is not deprecated or archived, but its young 0.x history leaves less evidence of long-term stability.
67%
Total Score
50
100
93
75
The repository is owned by a user account rather than an organization, so the concentrated activity shown by repo_bus_factor is not offset by visible organizational backing.
One contributor made all six commits in the last three months, creating a concentrated maintenance dependency with no demonstrated handoff capacity.
Six commits in the last three months show recent activity, but all activity comes from one active maintainer, limiting evidence of sustained maintenance capacity.
No repository security policy was found. This is a transparency gap for reporting vulnerabilities, though it is not by itself evidence of unsafe code.
Version 0.1.13 is not a stable-major release, so compatibility expectations are lower than for a mature 1.x package; it is not marked prerelease, which partly offsets this.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
darkaonline/l5-swagger Version ^2.1 || ^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.