It is clearly licensed and includes tests, with no install-time scripts or deprecation notice. The organization-backed repository is orderly, but its security and maintenance record is still too short to establish long-term dependability.
62%
Total Score
75
79
50
This is the package's first release, published today, so there is no release track record or demonstrated maintenance cadence yet. Its organization-backed repository provides some context, but not evidence of sustained support.
There were no commits or active maintainers in the last three months, although the repository was created or updated today and the package is only one day old. The short age explains the absence but still leaves maintenance capacity unproven.
The repository has zero stars, forks, and watchers. For a package released today this is weak evidence rather than proof of abandonment, but it leaves adoption and external validation unestablished.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest repository-hygiene gap, not a standalone supply-chain verdict.
The repository has no security policy. For a newly published, small implementation package this limits disclosure transparency, though it is less serious than an archived or inactive project.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/json-schema Version 13.32.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.