The package includes a README, repository tests, a changelog, release notes, and a clear MIT license. Its single-maintainer project has no commits in three months and uses unpinned workflow actions.
62%
Total Score
63
100
89
75
Only one registry maintainer is listed, leaving limited publishing redundancy; the linked repository is also owned by an individual rather than an organization.
The registry namespace and repository owner match, but both identify a single user rather than organizational backing, so there is limited visible continuity beyond the individual maintainer.
The package has only three releases over about two years and one release in the last 12 months, indicating a sparse cadence rather than strong ongoing release activity.
The repository recorded zero commits and zero active maintainers over the last three months, weakening evidence of continued maintenance after the release.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and assurance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
laminas/laminas-code Version ^4.0 | — | — |
jawira/case-converter Version ^3.5 | — | — |
illuminate/translation Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
suleymanozev/enum-helper Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.