The package has a clear license, a substantial README, repository tests, and documented release notes. Its security policy and scanning are absent, while all nine recent commits came from one contributor.
70%
Total Score
67
94
75
The repository owner is a user account rather than an organization, so there is no organizational backing shown to offset the concentrated contributor base.
One contributor made all 9 commits in the last 3 months, giving the project a complete single-person bus factor. That concentration creates meaningful continuity risk despite recent activity.
Composer build tooling is present, but no security scanning tools were detected. For a package handling AI integrations and credentials, this is a real but not severe oversight gap.
The repository has no security policy. This weakens vulnerability-reporting transparency and maintainer response expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
prism-php/prism Version dev-feature/openrouter-reasoning as 0.99.99 | — | — |
mustache/mustache Version ^3.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
spatie/yaml-front-matter Version ^2.0 | — | — |
pocketarc/laravel-integrations Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.