Centralized HashiCorp Vault secret management for Laravel services.
62%
Total Score
caution
Usable with caveats: a young project has thin maintenance activity and weak workflow security hygiene.
Only one registry account has publish access, which is a limited publishing fallback. The organization-owned repository provides some backing, making this less concerning than an entirely unaffiliated single-maintainer project.
Six releases in about 108 days show active early development, but the project is still young and has limited long-term maintenance evidence.
One contributor made all commits in the last three months, concentrating maintenance in a single person. Organization backing provides a possible handoff path, but no second active contributor is demonstrated.
Only one commit was recorded in the last three months, showing little sustained maintenance activity after the initial release burst.
The repository has zero stars, forks, and watchers, so there is little public adoption evidence. This is supporting evidence only and is less significant for a package released just over three months ago.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/console Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/support Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/contracts Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.