The package includes tests, release notes, a README, and a clear MIT license. Recent registry releases and an organization-backed repository help, but no commits were recorded in the past three months and the repository has no security policy or scanning.
68%
Total Score
75
94
67
A post-autoload-dump install-time script is present. This is not inherently unsafe, but it adds execution during installation and modestly increases dependency-installation exposure.
No commits and no active maintainers were recorded in the past three months. The same-day repository push and release cadence provide some compensation, but source-level maintenance evidence remains limited.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-process gap.
The repository has no published security policy, reducing transparency about vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^10.48.29|^11.0|^12.0|^13.0 | — | — |
sharpapi/php-core Version ^1.4.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.