The MIT license, matching repository, and organization backing improve transparency. Its small dependency footprint and clean install setup help, but there is limited evidence of ongoing care.
55%
Total Score
75
100
80
75
The published artifact includes a 2,331-character README, which supports consumer use. Missing tests and a changelog in the package are normal packaging practice, while the repository also reports no tests, leaving limited validation evidence.
The package has had no release in over a year: all three releases arrived within roughly one day in August 2025, and there were zero releases in the last 12 months. This indicates a stalled release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and reducing evidence of active maintenance.
The repository has no security policy, so there is no documented channel or process for handling vulnerabilities. This is a transparency and maintenance gap, not evidence of malicious behavior.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.0 || ^7.0 | — | — |
laravel/framework Version ^5.0 || ^6.0 || ^7.0 || ^8.0 || ^9.0 || ^10.0 || ^11.0 || ^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.