This is a newly published v1.0.0 package with only one release and no maturity history, so long-term maintenance and compatibility remain unproven. The release is nevertheless reasonably transparent and usable: it has a README, tests in both the artifact and repository, a complete small file tree, an MIT declaration, no install-time lifecycle scripts, no deprecation notice, and the repository is active and not archived. The main concerns are the package's age, zero repository popularity, lack of a security policy or security-scanning tooling, and the absence of broader activity evidence; these warrant caution before making it a foundational dependency, but do not indicate that it is currently unfit to use.
68%
Total Score
75
100
83
90
The source repository is owned by an individual GitHub user rather than an organization, so the package has limited visible institutional backing. This is a caution about bus-factor context, not proof of abandonment.
The package is 0 days old with only one release, so there is no demonstrated maintenance cadence or track record for compatibility and issue response.
The repository has zero stars, forks, and watchers. Because the package is newly released, this is weak negative evidence rather than a standalone abandonment conclusion, but it provides no external adoption signal.
Composer build tooling is present, but no security-scanning tools are reported. The missing scanning capability is a modest supply-chain hygiene gap.
The repository has no security policy. For an SDK that handles external API credentials and tenant tokens, this is a genuine disclosure and maintenance-process gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^9.0|^10.0|^11.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^9.0|^10.0|^11.0 | — | — |
illuminate/database Version ^9.0|^10.0|^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.