The repository is intact, documented, tested, and clearly matches the package. Its single-maintainer project has no recent commit or release activity, while workflow references are not pinned and no security policy is present.
64%
Total Score
50
100
89
83
Only one registry account has publish access. That is a limited publishing base, although the repository and package clearly correspond to the same project.
The package and repository are owned by a user account rather than an organization. This does not invalidate the project, but it provides less visible organizational backing for continuity.
The package has 10 releases since April 2019, but none in the last 12 months; its latest release was over a year ago. This indicates slowed maintenance, though the package has an established release history.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with no releases in the last year, this is evidence of inactive maintenance.
There are no open issues or pull requests, and no issue or pull-request activity in the last month. This is consistent with a quiet project but does not demonstrate active maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cerbero/enum Version ^2.3.2 | — | — |
laravel/prompts Version >=0.1 | — | — |
illuminate/console Version >=9.0 | — | — |
illuminate/support Version >=9.0 | — | — |
illuminate/contracts Version >=9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.