A Laravel Package for Nepal's Province, Districts and City Data.
65%
Total Score
50
94
50
The package uses a post-autoload-dump install lifecycle script. This is a supply-chain-sensitive behavior, but the signal gives no evidence that the script is harmful or unusually broad.
The package and repository are owned by the same individual account. This is coherent ownership but provides less organizational redundancy than a backed project with multiple active maintainers.
The package has 10 releases since June 2024, but none in the last 12 months, which indicates a meaningful maintenance pause for a dependency.
The repository recorded zero commits and zero active maintainers in the last 3 months, a concrete sign that maintenance capacity may currently be limited.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^10.0 || ^11.0 || ^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.