Documentation, repository tests, release notes, licensing, and security tooling provide a solid foundation. The package is still early-stage, with rapid releases and a single active contributor, so future continuity depends heavily on one person.
68%
Total Score
67
88
100
The repository is owned by an individual user rather than an organization, so the concentrated contributor activity has no shown organizational handoff capacity.
Six releases in 38 days show active initial development, but the very short history provides little evidence of long-term maintenance.
All 33 recent commits came from one contributor, leaving maintenance and continuity dependent on a single person.
Version v0.4.2 is not a stable major release, so its API and behavior may still change substantially despite not being marked prerelease.
Both workflows use read-only permissions and contain no detected dangerous sinks or audit findings, but all 17 action references are unpinned, leaving avoidable reproducibility and action-change risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/ai Version ^0.9.1 || ^0.10.0 | — | — |
illuminate/queue Version ^12.0|^13.0 | — | — |
opis/json-schema Version ^2.6 | — | — |
illuminate/events Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.