It has a clear README, release notes, and a matching source repository. Composer dependencies are moderate and install-time scripts are absent.
68%
Total Score
75
100
88
75
No license declaration, license file, or detected repository license was found, leaving the legal terms for using this dependency unclear.
The package has existed for over five years with 23 releases, but only one release appeared in the last 12 months; the latest release is recent, so this is a mild cadence concern rather than abandonment evidence.
All three recent commits came from one contributor, so maintenance depends heavily on a single person despite the recent activity.
The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
web-token/jwt-framework Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.