Setting the locale is not enough most of the time, some countries use more than one languages. Also, different countries use different date notation formats, names, flags and currencies. This package is here to help you with that!
78%
Total Score
63
100
94
70
The package uses a post-autoload-dump install-time lifecycle script. This adds execution during installation and warrants review, but the signal does not show a dangerous script or other severe behavior.
Only one registry account has publish access, which creates some concentration risk; however, the linked repository is maintained under the corresponding individual owner and has recent release evidence.
The repository owner is an individual rather than an organization, so the single-publisher structure offers less institutional backing; the long release history and recent repository activity provide some compensation.
No commits and no active maintainers were recorded in the last three months, which is a maintenance concern; the recent release and repository push partially offset the risk but do not remove it.
The repository uses Composer build tooling, but no security scanning tools were detected. The lack of scanning is a hygiene gap rather than evidence of unfitness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.