Wrapper for commonly used code for a much shorter syntax in controllers and such
62%
Total Score
63
100
78
80
A post-autoload-dump install-time script runs during Composer installation. This is not inherently unsafe, but it adds installation behavior that should be reviewed before adoption.
Only one registry publishing maintainer is listed. That is consistent with the matching user-owned repository, but it leaves publishing and maintenance dependent on one person.
The package and repository are owned by the same individual account rather than an organization. That matches the repository's single-contributor profile but provides no organizational handoff or continuity support.
The package is only 40 days old but has already published 11 releases, with a median interval of about 55 minutes. This shows active iteration but also limited real-world maturity and a potentially unstable development phase.
One contributor made all 16 commits in the last three months, creating a significant single-maintainer continuity risk for a personal project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0|^13.0 | — | — |
simplesoftwareio/simple-qrcode Version ~4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.