It has clear licensing, a matching repository, release notes, and no install-time scripts. Its maintenance record is still thin, with no commits in three months and no security policy or scanning.
62%
Total Score
50
100
83
83
The repository is owned by an individual user rather than an organization, so the limited maintainer and activity evidence is not offset by visible organizational backing.
This is the package's only release, published about six months ago, so there is little release history to demonstrate sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful warning for a package released only once.
The repository has no stars, forks, or watchers. Popularity is only supporting evidence, but these counts provide no community-based maintenance signal.
Composer is used for the build, but no security scanning tools are present, leaving security-maintenance practices less transparent.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
monolog/monolog Version ^2.0|^3.0 | — | — |
illuminate/support Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.