The package is small and has no automated tests or security scanning, while its single maintainer limits review capacity. It is licensed, not deprecated or archived, and has a focused dependency set, which partly offsets the maintenance concerns.
58%
Total Score
50
100
86
50
One registry maintainer is consistent with a small user-owned project, but it leaves limited visible publishing redundancy or review capacity.
The repository is owned by an individual rather than an organization, so the single-maintainer concern is not offset by visible organizational backing.
The package has four releases since March 2023 and none in the last 12 months; the latest release was in March 2025, indicating a long maintenance gap.
The repository had zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance.
Composer build tooling is present, but no security scanning tools are configured, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^5.8 || ^6.0 || ^7.0 || ^8.0 || ^9.0 || ^10.0 || ^11.0 || ^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.