The release includes tests in its source project, release notes, and a matching MIT license. Its maintenance has stopped, so new framework compatibility and fixes should not be expected.
8%
Total Score
0
40
50
Packagist marks the entire package as abandoned and names spatie/laravel-medialibrary as its replacement. This is a direct indication that developers should not start new dependencies on this package.
The package has had no release in more than five years, despite six releases overall. The early release cadence does not compensate for the prolonged period without a new release.
There were no commits and no active maintainers in the last three months. Alongside the archived repository, this confirms that active maintenance is absent.
The linked repository is archived, with its last push nearly five years ago. Archived source removes the normal path for maintenance and compatibility fixes.
All four workflows were analyzed without high-confidence audit findings or dangerous triggers, but all 11 action references are unpinned. That is a supply-chain hygiene caution, though it is secondary to the package's abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^7.0 || ^8.0 | — | — |
illuminate/support Version ^7.0 || ^8.0 | — | — |
illuminate/database Version ^7.0 || ^8.0 | — | — |
illuminate/contracts Version ^7.0 || ^8.0 | — | — |
astrotomic/laravel-eloquent-uuid Version ^1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.