The package is licensed and includes tests, a changelog, and a usable README. It has no repository security policy or scanning, and its small contributor footprint leaves limited visible maintenance capacity.
62%
Total Score
50
100
83
83
Only one registry account has publish access. The linked project is user-owned rather than organization-owned, so there is limited observable publishing redundancy.
The repository is owned by an individual account rather than an organization, providing no observable organizational backing to compensate for the single maintainer.
There was only one release in the last 12 months, and the latest release was published about 11 months ago. This suggests a quiet maintenance cadence, although the package has 29 releases overall.
The repository recorded zero commits and zero active maintainers in the past three months. This is a meaningful sign of currently quiet maintenance, despite the recent release history.
The repository has zero stars and forks and one watcher, indicating little visible adoption. Popularity is supporting evidence rather than a verdict, so this modestly lowers confidence in project maturity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version 7.* || ^8.15 || 9.0 - 9.34 || ^9.36 || ^10.0 | — | — |
matthewbdaly/laravel-azure-storage Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.