The repository includes tests, release notes, security scanning, and a clear package structure, while the release is licensed and not deprecated. All four workflow actions are unpinned, and the single individual maintainer provides limited evidence of long-term support.
68%
Total Score
50
83
75
Only one registry account has publish access, and the repository owner is an individual rather than an organization. That limits visible publishing redundancy, though registry access alone does not establish actual maintenance activity.
This is the package's first release, published today, so there is no release cadence or track record yet. Its repository was updated immediately before collection, which partly offsets the lack of history.
There were no commits from active maintainers in the last three months, but the repository was pushed immediately before this assessment and the package is newly released. The zero historical window is therefore weak evidence of abandonment, but provides no long-term maintenance proof.
The repository has no security policy, leaving the reporting path for vulnerabilities undocumented. This is a transparency gap, but not a severe dependency risk on its own.
v0.1.0 is not a stable major release, so its API and behavior may change substantially as the project matures.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version ^7.0 | — | — |
illuminate/console Version ^11.0 || ^12.0 | — | — |
illuminate/support Version ^11.0 || ^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.