Usable with caveats: it is a clearly licensed, recently released package with a matching repository and useful documentation, but maintenance appears to have stopped for about six months. A single maintainer, no automated security scanning, and no tests increase the cost of relying on it for a core application feature.
61%
Total Score
50
100
81
75
The registry namespace and repository are owned by the same individual account, which supports package identity but provides no organization-level backing or redundancy.
The repository recorded zero commits and zero active maintainers over the last three months; together with the latest push being about six months ago, this is a meaningful maintenance warning.
The repository has zero stars, forks, and watchers. This offers no community validation, although popularity is only supporting evidence and a young package can still be healthy.
Composer build tooling is present, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.
The repository has no published security policy, so there is no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^3.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.