Documentation, tests, licensing, and a security policy provide a solid starting point. The package is still young and relies on one contributor, while its workflows use six unpinned actions.
68%
Total Score
50
100
93
100
Only one registry account has publish access; this is a modest operational risk, and the repository is user-owned rather than organization-backed.
The repository is owned by an individual account rather than an organization, so there is no provided evidence of organizational maintenance capacity.
This is a young package released once 41 days ago, so there is not yet enough release history to demonstrate sustained maintenance.
One contributor made all 17 recent commits, leaving the project dependent on a single person for ongoing maintenance.
The repository has 17 commits from one active maintainer in the last three months, showing recent work but limited maintenance depth.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^5.0|^6.0|^7.0 | — | — |
illuminate/http Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/console Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/routing Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.