Usable with caveats: the package is licensed, backed by a matching organization repository, and has tests and security tooling. However, it has had only one release and no recorded commits in the last three months, so ongoing maintenance is uncertain; workflow permissions and an install script add operational risk.
55%
Total Score
50
50
89
75
There were zero commits and zero active maintainers in the last three months. Combined with the last recorded repository push being about 2 years and 2 months ago, this is the strongest concern about abandonment risk.
Seven runtime dependencies, including Laravel components, a GitHub API client, an OpenAI client, and an HTTP client, create a moderately broad dependency surface. This is reasonable for the package's stated integration role but increases maintenance exposure.
The package defines a post-autoload-dump install-time lifecycle script. This is a meaningful installation surface that warrants review before adoption, even though the signal does not show that the script is malicious.
Only one release exists, published about 2 years and 8 months ago, with no releases in the last 12 months. This is substantial evidence of limited ongoing maintenance for a package developers may depend on.
There are no open issues and no new or merged pull requests in the last month, although three pull requests remain open. This shows little current project interaction and modestly reinforces the maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
openai-php/client Version ^0.8 | — | — |
illuminate/support Version ^10.0 | — | — |
knplabs/github-api Version ^3.0 | — | — |
symfony/http-client Version ^7.0 | — | — |
illuminate/contracts Version ^10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.