The package includes clear licensing, documentation, repository tests, and release notes for this version. Maintenance is lightly active and concentrated, while workflow pinning and security guidance remain weak.
65%
Total Score
50
100
88
75
The repository is owned by an individual user rather than an organization, so the single-contributor concentration has no demonstrated organizational handoff support.
The package has five releases over 637 days and two releases in the last 12 months, showing ongoing but relatively modest release activity.
One contributor made all commits in the last three months, leaving maintenance dependent on a single active person.
Only one commit was recorded in the last three months, which indicates limited recent maintenance despite the repository being active.
Composer build tooling is present, but no security-scanning tool was detected, leaving supply-chain hygiene less independently checked.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^12|^13 | — | — |
spatie/laravel-package-tools Version ^1.17.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.