The repository has a substantial test suite and matching README, with MIT licensing and no install scripts. GitHub Actions leaves both referenced actions unpinned and the project has no security policy or scanning, so pinning and ownership checks matter.
67%
Total Score
50
100
81
67
The package is newly published, with four releases within the same day and no longer-term release pattern yet. This limits evidence of sustained maintenance, although rapid initial releases are not inherently unhealthy.
There have been no commits from active maintainers in the last three months, but the package itself is only newly published and the repository was pushed recently. This remains limited evidence rather than proof of abandonment.
Composer build tooling is present, but no security scanning tools are configured. That is a transparency and maintenance gap, though it is not by itself evidence that the release is unsafe.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a modest transparency gap for a package that handles application telemetry.
Version v0.2.1 is pre-1.0, so the API may still change and the project has not established stable-major maturity. It is not marked as a prerelease, which partly offsets the concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
monolog/monolog Version ^2.0|^3.0 | — | — |
illuminate/queue Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/console Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.