It has a clear MIT license, extensive documentation, repository tests, release notes, and no install-time scripts. One contributor made all 39 recent commits, while the low-confidence cache warning is a minor workflow concern.
82%
Total Score
70
100
100
83
Only one account has registry publish access. That is a modest publishing bus-factor concern, although the linked repository shows active work by the same maintainer.
The repository is owned by an individual rather than an organization, so the single-contributor concentration is not offset by visible organizational handoff capacity.
All 39 commits in the past three months came from one contributor, creating concentration and abandonment risk despite the strong activity level.
The only workflow was fully analyzed, uses read-only permissions, and pins all 8 action references. The auditor reported a low-confidence cache-poisoning pattern; under the audit guidance this is a minor hygiene concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nikic/php-parser Version ^5.0 | — | — |
illuminate/console Version ^12.0 || ^13.0 | — | — |
illuminate/routing Version ^12.0 || ^13.0 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.