The package includes a substantial README, changelog, license, and no install-time scripts. Its workflow leaves both actions unpinned, while recent work is concentrated in one contributor and no security policy is present.
72%
Total Score
67
89
50
The repository is owned by a personal user account rather than an organization, so the single-contributor concentration has no shown organizational handoff coverage.
One contributor made all 22 commits in the last 3 months, leaving maintenance dependent on a single individual and increasing continuity risk.
The repository has zero stars and forks and one watcher. This is limited supporting evidence for maturity, though the package is still relatively young and popularity is not decisive.
Composer build tooling is present, but no security-scanning tools were detected, leaving less automated coverage for dependency or code-quality risks.
The repository has no SECURITY.md or other security policy, reducing transparency about vulnerability reporting and maintenance response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aws/aws-sdk-php Version ^3.363 | — | — |
laravel/sanctum Version ^4.0 | — | — |
illuminate/support Version ^12.0 | — | — |
risetechapps/risetools Version ^3.0.1 | — | — |
hisorange/browser-detect Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.