Clear documentation, a matching repository, and a recent release make adoption straightforward. The small project footprint leaves limited evidence of sustained maintenance or independent review.
64%
Total Score
50
100
83
75
Only one registry account has publish access. With repository ownership shown as an individual rather than an organization, this indicates a thin publishing and continuity base.
The source repository is owned by an individual account, so there is no organizational backing signal to compensate for the single-maintainer profile.
The package has only two releases over about 362 days, with a median interval of roughly 218 days. That is a slow but not abandoned release pattern, especially given the recent v1.2.0 release.
The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the current maintenance signal remains weak.
There are no open issues or pull requests, but there was also no issue or pull-request activity in the last month. This gives little evidence of active community review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
voku/html-min Version ^4.5 | — | — |
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.