Its matching organization-owned repository, clear README, and Apache-2.0 licensing provide useful transparency. The metapackage has no install scripts, and its three-file artifact fits its stated role.
68%
Total Score
75
100
89
88
The package is 0 days old with only 1 release, so there is no release history demonstrating sustained maintenance or stability.
There were 0 commits and 0 active maintainers in the last 3 months, but the package itself was published only 0 days ago; this shows no established maintenance record rather than clear abandonment.
The repository uses Composer, appropriate for this package, but no security scanning tools were detected; for this small metapackage that is a limited hygiene gap rather than a severe concern.
No security policy was detected. That reduces disclosure transparency somewhat, but the package is a small, newly published metapackage with no other provided security warning.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/laravel-framework-impl Version ~13.32.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.