Laravel models with user-defined fields: typed JSON fields added without migrations, lists of values, and a trigger-based change log on PostgreSQL and MariaDB.
68%
Total Score
caution
Only two days of release history and fully unpinned workflow actions limit confidence in this otherwise well-documented package.
The package is only 2 days old, despite 12 releases in that period; this shows active initial development but provides little evidence of sustained maintenance.
The repository has zero stars, forks, and watchers. This is weak supporting evidence rather than a severe concern, especially for a package only 2 days old.
Version v0.7.3 is not a stable major release, so API compatibility and behavior may still change while the project matures.
The sole workflow was fully analyzed with no audit findings or untrusted checkout and script-injection paths, but all 4 action references are unpinned, leaving avoidable update-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^13.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.