Documentation and project structure are solid, with tests in the repository and a release note for this version. The single-maintainer base, no commits in the last three months, and entirely unpinned workflow actions reduce confidence for a long-lived dependency.
61%
Total Score
50
100
88
83
One registry maintainer is consistent with a small user-owned project, but it leaves the package dependent on a single publishing account.
The registry namespace and repository owner match, but the owner is an individual rather than an organization. This supports direct ownership while offering limited evidence of organizational continuity.
The package has four releases since March 2021, but there were no releases in the last 12 months and the latest release was in February 2025. This indicates a meaningful maintenance slowdown, though not abandonment by itself.
The repository had no commits and no active maintainers in the last three months, weakening evidence of ongoing maintenance.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these numbers provide little external evidence of maturity or community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/mailer Version ^7.2 | — | — |
illuminate/contracts Version ^11.0|^12.0 | — | — |
spatie/laravel-package-tools Version ^1.6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.