It has a clear MIT license, README, tests, and a repository that matches the package. Its small dependency profile and build tooling help, but it lacks a security policy and scanning.
35%
Total Score
0
100
80
50
Only two releases were published, both in September 2016, and there have been no releases in roughly 10 years. The stable 1.0.0 version does not compensate for this prolonged inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push being about 10 years ago. This is strong evidence that maintenance has stopped.
The repository has no security policy and no security scanning tools were reported elsewhere in the collected repository signals. This is a modest transparency and maintenance gap, though it is secondary to the long inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
arrilot/laravel-widgets Version ^3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.