Clear documentation, tests, and release notes make integration easier. Workflow review is incomplete, and the available automation uses unpinned actions.
64%
Total Score
50
100
94
50
Only one account has registry publish access. That is a limited publishing base, though repository activity provides some evidence of ongoing ownership.
One contributor made all recent commits, so maintenance depends heavily on a single person with no observed recent backup.
Only one commit was recorded in the last 3 months, indicating limited recent development activity despite the recent release.
Composer build tooling is present, but no security-scanning tool was detected, leaving a transparency and hygiene gap.
The repository has no security policy, so it gives users no documented route for reporting vulnerabilities or understanding disclosure practices.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.0|^3.0 | — | — |
moneyphp/money Version ^4.0 | — | — |
illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/view Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/routing Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.