The repository includes tests, release notes, a security policy, and a source tree that matches the package. GitHub Actions use unpinned dependencies, while one publisher and limited recorded activity reduce confidence in long-term maintenance.
62%
Total Score
50
100
81
83
Only one account has registry publish access, which leaves a thin publishing base. The linked repository is user-owned, so there is no organizational backing shown to compensate for that concentration.
The registry namespace and repository owner are the same individual account, confirming ownership consistency but showing no organization-level backing to broaden maintenance capacity.
The package has only two releases, both published on November 29, 2025, and no later release across roughly 10 months. This is limited evidence of an established maintenance cadence.
There were no new issues, closed issues, new pull requests, or merged pull requests in the measured month. This offers little evidence of active community maintenance, though issue counts are partly unknown.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external adoption or review signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^7.0 | — | — |
illuminate/console Version ^11.0|^12.0 | — | — |
illuminate/support Version ^11.0|^12.0 | — | — |
illuminate/filesystem Version ^11.0|^12.0 | — | — |
illuminate/validation Version ^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.