Usable with caveats: the package is clearly documented, licensed, correctly tied to its source repository, and not deprecated or archived. However, it has only one release and no commits in the last three months, so its maintenance maturity is not yet proven.
62%
Total Score
50
100
94
83
The repository is owned by an individual account rather than an organization, so the single registry maintainer does not have organizational backing to compensate for the thin maintenance history.
This is a young package with only one release, so there is limited evidence of sustained maintenance or release reliability.
The repository recorded zero commits and zero active maintainers during the last three months, leaving maintenance continuity unproven after the initial release.
The repository has no security policy, which leaves vulnerability-reporting expectations unclear for a package that calls an external weather API.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^4.0|^5.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.