This release appears suitable for dependency use, with a long release history, a stable current major version, a matching and active source repository, repository tests, a clear MIT license, and no deprecation or dangerous workflow findings. The main reservations are that no commits were recorded in the last 3 months, registry publishing is controlled by one maintainer, and repository security hardening is limited by the absence of a security policy and explicit workflow token permissions. These are meaningful but not disqualifying concerns, especially given the recent release and the repository's test coverage and project alignment.
78%
Total Score
63
100
94
80
Only one registry account has publish access, creating a modest continuity concern if that maintainer becomes unavailable. The linked repository is directly owned by the same individual, so this is a thin-bus-factor concern rather than evidence of disconnected publishing.
The repository is owned by a user account rather than an organization, so there is no organizational backing to offset the single-maintainer continuity concern. The direct repository ownership is nevertheless clear.
No commits and no active maintainers were recorded during the last 3 months, which is a genuine maintenance slowdown. The recent release and merged pull request partially offset this, but the lack of commit activity remains a caution for future support.
Composer build tooling is present, but no security-scanning tools are configured. For a small PHP package this is a hygiene gap rather than a severe health failure.
The repository has no SECURITY.md or equivalent security policy, reducing transparency around vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^13.0 | — | — |
chinleung/laravel-locales Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.