Healthy and actively maintained, with strong project transparency and unusually frequent recent development. Install with normal care for a pre-1.0 package: it has a single registry maintainer, install-time scripts, and a small contributor base.
82%
Total Score
83
83
80
The package defines post-autoload-dump, post-install-cmd, and post-update-cmd scripts, which add install-time behavior and deserve review before adoption.
The repository is owned by an individual rather than an organization, and the registry has one publishing maintainer. The active commit record compensates for some capacity risk, but long-term continuity depends heavily on that individual.
The package is only 61 days old but has 87 releases, with releases arriving roughly every 6 hours. This shows active iteration but leaves limited long-term maintenance history.
The repository has only 3 stars and no forks or watchers. This is limited supporting evidence, but popularity alone does not outweigh the strong maintenance and transparency signals.
Four workflows declare read-only permissions, but one workflow grants top-level write access and another lacks top-level permissions, leaving some CI permission hygiene to review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^7.2||^8.0 | — | — |
nikic/php-parser Version ^5.0 | — | — |
illuminate/console Version ^12.0||^13.0 | — | — |
illuminate/process Version ^12.0||^13.0 | — | — |
illuminate/routing Version ^12.0||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.