The README, MIT licensing, matching repository, and organization backing provide useful documentation and ownership context. Security scanning is absent, and the repository has no demonstrated commit or issue history yet.
61%
Total Score
75
81
75
The package is less than a day old, with 8 releases arriving over roughly 23 hours and a median interval of about 1.5 hours. This shows active initial publishing but provides almost no long-term maintenance evidence.
The repository shows 0 commits and 0 active maintainers in the past 3 months. Because the package is newly published, this is limited evidence rather than proof of abandonment, but it leaves maintenance capacity unestablished.
Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap for a package intended to be installed into an application.
The repository has no security policy. This weakens vulnerability-reporting transparency, although it is not by itself evidence that the package is unsafe to depend on.
Version v0.42.1 is not a stable major release, which is expected for a new package but indicates the API may still change as the project matures.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webx-ui/mcp Version ^0.42.1 | — | — |
illuminate/http Version ^13.0 | — | — |
illuminate/routing Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.