Pusher-compatible websockets powered by vask.dev
61%
Total Score
caution
Usable with caveats: maintenance has gone quiet and CI has weak workflow hygiene.
The package runs a post-autoload-dump install lifecycle script. This is a relevant installation-time behavior that adds operational complexity, though the signal alone does not show it is unsafe.
All 11 releases arrived within a few hours on the package's first release day, which shows initial activity but provides little evidence of sustained maintenance over the 140-day package age.
The repository recorded zero commits and zero active maintainers in the last 3 months, weakening evidence that the project is being actively maintained.
The repository has 6 stars, 0 forks, and 0 watchers. This is limited adoption evidence, but popularity is only supporting evidence and does not outweigh the maintenance signals.
The repository has no security policy, leaving disclosure and response expectations undocumented for a package that handles credentials and webhook integration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^10.0||^11.0||^12.0||^13.0 | — | — |
pusher/pusher-php-server Version ^7.2 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.