This release appears usable and actively maintained: it has nine releases over 163 days, a stable non-prerelease version, recent repository activity, a non-archived source repository, an MIT license, and no install-time lifecycle scripts. However, maintenance is concentrated in a single contributor, the repository has no tests, changelog, security policy, or security-scanning tooling, and the project has no visible stars or forks. The package also exposes browser-based execution of Laravel Artisan commands, so the limited verification and security transparency warrant caution before adopting it in a production dependency set.
68%
Total Score
60
100
83
90
Only one account has registry publish access. This is not evidence of who actively maintains the project by itself, but it leaves little publishing redundancy for an independently owned package.
A substantial README is present, but neither the artifact nor repository contains tests or a changelog. For a package that executes Artisan commands, the absence of tests reduces confidence in behavior and regressions.
The source repository is owned by a User account rather than an organization, so the concentrated maintainer and contributor base is not visibly compensated by organizational maintenance capacity.
All four commits in the last three months came from one contributor, producing a 100% top-contributor share and a single-person contributor base. This creates a material continuity and handoff risk.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not intrinsically negative for a small package, but it provides no evidence of external review or support activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.