The package has thorough tests, a substantial README, and release notes for this version. Its single-release history and no commits in the last three months leave maintenance continuity unproven, while all three workflow actions are unpinned.
65%
Total Score
63
100
89
67
The package uses a post-autoload-dump install-time script. This adds execution during installation and warrants some care, but the signal alone does not indicate a severe dependency risk.
One registry maintainer is consistent with a user-owned project, but it provides a thin publishing base and no independent evidence of broader maintenance capacity.
This is the only release, published about 10 months ago, so there is no demonstrated release continuity after the initial publication.
There were zero commits and zero active maintainers in the last three months, leaving current maintenance responsiveness unproven after the initial release.
One issue was opened in the last month and none were closed, with two issues currently open; this suggests some user activity without evidence of issue resolution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/lock Version ^6.0|^7.0 | — | — |
symfony/finder Version ^6.0|^7.0 | — | — |
illuminate/console Version ^12.38.1 | — | — |
illuminate/support Version ^12.38.1 | — | — |
illuminate/contracts Version ^12.38.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.