The repository includes tests, matches the package, and is backed by an organization, while the MIT license and no install scripts reduce adoption friction. Security scanning is absent, and the project has too little history to establish dependable long-term maintenance.
68%
Total Score
83
50
79
83
The package declares 11 runtime dependencies, including several framework and sibling WebX UI modules. This is a relatively broad dependency surface and increases compatibility and maintenance coupling.
The package is only 1 day old, with 5 releases and a median interval of about 7.6 hours. This shows active initial publishing but provides little evidence of sustained maintenance.
The repository reports 0 commits and 0 active maintainers over the last 3 months. Because the project is only 1 day old, this is mainly limited evidence rather than proof of abandonment.
Composer is used for builds, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap.
The repository has no security policy. For a new package this leaves vulnerability-reporting expectations unclear, though it is not by itself evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webx-ui/mcp Version ^0.56.0 | — | — |
illuminate/view Version ^13.0 | — | — |
illuminate/routing Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.