The project is still very small, with one release in about five and a half months and no commits in the last three months. Clear licensing, useful documentation, and a matching source repository reduce adoption friction, but the limited maintenance record warrants caution.
58%
Total Score
50
100
83
83
Only one release exists, published about five and a half months ago, so there is little evidence of an established release or maintenance cadence.
There were no commits and no active maintainers in the last three months, leaving current maintenance capacity unproven after the initial release.
The repository has zero stars and one fork, offering little community evidence; this is a maturity concern, though popularity is supporting evidence rather than decisive on its own.
Composer is used for the build, but no security scanning tool is present. This is a modest transparency and assurance gap, not evidence of unsafe code.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.