Tests, documentation, licensing, and organization backing provide a solid baseline. The small release history, recent lack of commits, and unpinned workflow actions leave maintenance and build-reproducibility concerns.
61%
Total Score
75
100
81
67
The package has only three releases across about 20 months, with a median interval of roughly 246 days; two releases in the last 12 months and a release four months ago provide some ongoing activity.
There were no commits and no active maintainers in the last three months, a meaningful sign that maintenance may have slowed or paused.
Composer build tooling is present, but no security scanning tools were detected; the repository therefore has limited automated security hygiene.
No repository security policy was found. The README provides a security contact, which partly compensates for the missing formal policy but does not replace it.
Version 0.0.3 is not a stable-major release, which suggests a less mature compatibility commitment, although it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10|^11|^12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.