The package is licensed, documented, tested, actively updated, and backed by an organization. Its workflows use unpinned actions and the repository has no security policy, reducing transparency and build confidence.
70%
Total Score
83
100
81
67
There have been 48 releases in about 10 months, showing active delivery, although the median interval is roughly 41 minutes and suggests a rapidly changing project.
All 13 recent commits came from one contributor, concentrating maintenance and creating a meaningful continuity risk. Organization backing provides some capacity for handoff but does not show a second active contributor.
Composer build tooling is present, but no security scanning tools were detected, leaving automated security coverage unclear.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities.
Version v0.5.0 is not a stable major release, so the API may still change despite no recent prereleases being reported.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
socialdept/atp-client Version ^0.1 || ^0.2 || ^0.3 | — | — |
socialdept/atp-schema Version ^0.4 | — | — |
socialdept/atp-signals Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.