Documentation, release notes, repository tests, and active recent commits provide a solid foundation. Maintenance depends on one contributor, so continuity remains the main weakness.
82%
Total Score
67
100
100
100
The package and repository are owned by the same individual account rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.
One contributor made 100% of the 36 recent commits, creating a real continuity and review risk despite the high activity level.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^1.1 || ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.15.2 | — | — |
laravel/framework Version ^12.0 || ^13.0 | — | — |
guzzlehttp/promises Version ^2.0 | — | — |
elasticsearch/elasticsearch Version ^8.5 || ^9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.