A complete README, repository tests, release notes, and a security policy provide useful maintenance and adoption evidence. The install hook and missing workflow permission declaration deserve review before upgrading.
70%
Total Score
67
100
83
75
The package uses a post-autoload-dump install-time script. This is a mild supply-chain and installation-complexity concern, though only one standard Composer lifecycle hook is reported.
The repository is owned by a personal GitHub account rather than an organization, so the concentrated contributor activity is not visibly offset by organizational backing.
The package is only 51 days old, with 8 releases and a very short median interval, showing active early development but limited time to establish stability.
One contributor made 100% of the 11 recent commits, leaving no demonstrated backup maintainer and increasing abandonment or handoff risk.
The repository has 1 star and no forks or watchers. This is limited adoption evidence, but popularity is supporting context rather than a decisive health concern for a young package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^12.0 | — | — |
schoolpalm/cache-store Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.