The README is detailed, the package is licensed, and releases have been frequent since publication. Its clean repository and absence of install scripts reduce operational friction; pin this version while it matures.
67%
Total Score
50
100
93
75
One contributor made all eight commits in the last three months, giving the project a 100% top-contributor share. As an individual-owned project, there is no organizational backing shown to offset this concentration.
The repository recorded eight commits in the last three months, showing recent activity, but all activity came from one active maintainer. That limits evidence of sustained maintenance capacity.
Composer is used as a build tool, which is appropriate for the package, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy. For a package handling Apple certificates and Google service-account integrations, the lack of a documented vulnerability-reporting path is a meaningful hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.0|^12.0 | — | — |
firebase/php-jwt Version ^7.0 | — | — |
google/apiclient Version ^2.15 | — | — |
illuminate/routing Version ^11.0|^12.0 | — | — |
illuminate/support Version ^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.