A decoupled Laravel (API) + Next.js starter kit with Fortify + Sanctum authentication, powered by next-sanctum.
68%
Total Score
63
100
83
50
The package defines four lifecycle scripts, including post-create-project-cmd and post-update-cmd. Such scripts can be expected in a project starter, but they increase install and update behavior that consumers must understand.
The repository is owned by a user account rather than an organization, so the highly concentrated contributor activity is not compensated by visible organizational backing.
The package is only 82 days old with eight releases, all in the last 12 months, so it shows active early development but not yet a long maintenance record.
Two contributors are present, but one accounts for 13 of 14 recent commits. That concentration creates a meaningful continuity risk for a user-owned project.
There are no open issues or pull requests and no recent issue or pull-request activity. This is neutral for a young project, but it provides little evidence of community support.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/tinker Version ^3.0 | — | — |
laravel/fortify Version ^1.37 | — | — |
laravel/sanctum Version ^4.3 | — | — |
laravel/passkeys Version ^0.2.1 | — | — |
laravel/framework Version ^13.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.