Tests, a detailed README, and security scanning provide useful baseline coverage, while the repository has had no commits in three months. The project is small and lightly adopted, with one registry maintainer and no security policy.
58%
Total Score
50
89
75
Only one account, Zapwize Team, has registry publish access. This leaves a thin publishing base, although the linked repository provides a concrete source project.
There have been 6 releases in the last 12 months, but the 9-release history is tightly clustered, with a median interval of about 26 minutes; this shows initial activity more than sustained maintenance.
The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful maintenance concern for a package released within the past year.
The repository has 0 stars, forks, and watchers, so there is little external evidence of adoption or community support. Low popularity is supporting caution rather than proof of poor quality.
No security policy was found in the repository, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but not a severe dependency risk by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ratchet/pawl Version ^0.4.3 | — | — |
illuminate/http Version ^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/queue Version ^9.0|^10.0|^11.0|^12.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/events Version ^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.