The package includes tests, a substantial README, a clear MIT declaration, and no install-time scripts. Its single-release history, two commits in three months, and one-contributor activity leave long-term maintenance unproven.
66%
Total Score
50
100
86
75
This is a young package at 93 days old with only one release, so its maintenance and compatibility record are not yet established.
All two recent commits came from one contributor, leaving maintenance dependent on a single active person with no demonstrated handoff capacity.
The repository recorded only two commits in the last three months, showing some recent activity but limited evidence of sustained maintenance.
Composer build tooling is present, but no security-scanning tool was detected, leaving security hygiene less transparent than it could be.
The repository has no security policy, which makes vulnerability reporting and response expectations unclear for a package that handles API credentials.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.5 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.