Its tests, documentation, and clear MIT licensing make the project easier to evaluate. Treat the beta and its one-day history as a trial dependency rather than a mature foundation.
64%
Total Score
50
83
50
The package is only 1 day old, with 3 releases clustered within about 40 minutes; this shows active initial publishing but no established maintenance history.
The repository records 0 commits and 0 active maintainers in the last 3 months, but the package is only 1 day old, so this is chiefly a lack of history rather than evidence of abandonment.
The repository has no security policy. This is a transparency gap for a database driver, although it does not by itself indicate that the release is unsafe.
This release is a beta, and all recent releases are prereleases, so compatibility and API stability remain uncertain.
All 11 analyzed action references are unpinned, and one workflow grants top-level write permissions; these are avoidable supply-chain hygiene weaknesses. The audit found no untrusted checkout, script injection, or high- or medium-severity findings.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/uid Version ^7.0 || ^8.0 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
illuminate/database Version ^12.0 || ^13.0 | — | — |
vuthaihoc/laravel-db-portable Version ^0.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.