The package has clear licensing, documentation, release notes, and a matching source repository. Its small maintainer base and absent security tooling leave less resilience if maintenance stops.
68%
Total Score
63
100
89
100
Only one registry account has publish access, limiting publishing redundancy. This is a caution rather than a severe risk because the repository is maintained under the same individual owner.
The registry namespace and repository are owned by the same individual account, providing consistent ownership context. It is not organization-backed, so there is no visible institutional redundancy.
The repository recorded zero commits and zero active maintainers in the last three months. Although the latest release was recent, this leaves current maintenance activity unconfirmed and raises abandonment risk.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide little external validation or backup signal.
Composer is used as the build tool, but no security-scanning tooling is present. This is a modest transparency and maintenance gap, not evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.4 | — | — |
laravel/framework Version ^9.0 || ^10.0 || ^11.0 || ^12.0 | — | — |
illuminate/support Version ^9.14.1 || ^10.0 || ^11.0 || ^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.