Documentation, tests, licensing, and workflow controls are in place. The repository has no security policy or scanning, and its organization backing does not yet broaden the active contributor base.
72%
Total Score
83
81
75
Eight releases in 97 days show an active young project, but the latest release was about 48 days before collection, so long-term maintenance is not yet established.
One contributor made all 10 commits in the last three months, creating a real continuity risk. Organization ownership offers some handoff capacity, but no second active contributor is shown.
Composer build tooling is present, but no security scanning tool is reported, leaving a modest transparency and maintenance gap.
The repository has no published security policy, so vulnerability reporting and response expectations are not documented.
The current v0.5.1 release is not a prerelease, but the 0.x major line indicates the API may still change before a stable 1.0 release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.8 | — | — |
illuminate/support Version ^10.0 || ^11.0 || ^12.0 | — | — |
vskstudio/takt-core-php Version ^0.5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.