It has Apache-2.0 licensing, tests, a matching repository, and organization backing. The package is explicitly an implementation dependency, so its small artifact and lack of a README are less concerning; reassess after a longer maintenance history.
62%
Total Score
75
100
88
88
The package was first released today and has only two releases, both within minutes; this provides almost no evidence of sustained maintenance or release maturity.
The repository has zero commits and zero active maintainers in the last three months; because it was created today this is primarily an unproven-maintenance concern, not evidence of long-term abandonment.
Composer is used as the build tool, which fits the package ecosystem, but no security-scanning tools are reported, leaving a modest hygiene gap.
No security policy is present. This is a transparency and reporting gap, though the package's small, newly created implementation scope limits its weight.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/collections Version 13.33.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.