The package includes a substantial artifact, clear documentation, tests, a changelog, and an MIT license. Its single-maintainer setup, sparse release cadence, alpha status, and unavailable repository make long-term support and provenance less certain.
55%
Total Score
50
100
80
75
The package runs a post-autoload-dump install-time script. This is not severe by itself, but it adds execution during installation and warrants extra scrutiny.
Only one account has package publish access. That does not prove poor maintenance, but it creates a thin support and continuity base.
The package has only three releases across 672 days, with a median interval of about 320 days. Two releases in the last 12 months show some recent activity, but the overall history remains sparse.
The assessed version is 0.0.3-alpha, and all recent releases are prereleases. The package README also describes it as work in progress and intended for demos, limiting confidence for production dependency use.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version >=11 | — | — |
cerbero/json-parser Version ^1.1.1 | — | — |
dragonmantank/cron-expression Version ^3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.