The package is small but documented, licensed, and its repository clearly matches the package. Limited project activity, no automated security scanning, and a very small audience reduce confidence in long-term maintenance.
58%
Total Score
50
100
78
83
A post-autoload-dump script is present; this is common Composer package integration behavior, but it adds install-time execution that consumers should understand.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so the project has limited visible backing.
All four releases arrived within about two days, with no later releases observed across the package's 246-day age; this suggests an initially active but now quiet project.
The repository recorded zero commits and zero active maintainers during the last three months, a meaningful maintenance concern for a package that is only about eight months old.
The repository has one star and no forks or watchers. This is weak supporting evidence, but popularity alone does not determine health for a small package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/forms Version ^4.0|^5.0 | — | — |
intervention/image Version ^3.11 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.