Clear documentation, repository tests, and a matching source repository improve adoption confidence. The package is licensed and has no install scripts, but its longer-term maintenance record is still limited.
68%
Total Score
83
100
81
83
This release is part of a package only 2 days old, with 2 releases and a median interval of about 2 days. That shows active initial publishing but provides little evidence of sustained maintenance.
There were 0 commits and 0 active maintainers in the last 3 months, but the repository and package are only about 2 days old. This is an important limitation on maintenance evidence, not proof of abandonment.
The repository has 2 stars, 0 forks, and 0 watchers. Low popularity offers little supporting evidence, though it is not a health verdict for a newly published package.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of unsafe maintenance.
The single workflow was fully analyzed with no audit findings, no untrusted checkout or script-injection sinks, and no write-level top permissions. Both action references are unpinned, which is a supply-chain hygiene caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/view Version ^12.0 | — | — |
illuminate/support Version ^12.0 | — | — |
zentiq-labs/fast-pdf Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.