The project is only 44 days old and has released three versions in a short burst. It has active commits, repository tests, a changelog, clear licensing, and security tooling, but maintenance depends on one contributor.
68%
Total Score
67
100
88
100
Only one registry account has publish access. That is a real continuity concern for a user-owned project, although repository activity shows the same maintainer is currently active.
The package is only 44 days old with three releases, all published within about two hours, so its long-term maturity is still unproven.
One contributor made all 30 recent commits, leaving no demonstrated handoff capacity if that maintainer becomes unavailable.
The repository has one star and no forks or watchers. This does not indicate abandonment by itself, but it provides little independent evidence of broad adoption or community support.
All five workflows were analyzed with no audit findings and no untrusted checkout or script-injection paths. However, two workflows grant top-level write access and 4 of 13 action references are unpinned, creating a modest reproducibility and permissions concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^4.0 || ^5.0 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.