The package includes clear usage documentation, a license, repository tests, and organizational ownership. Its only beta release is 660 days old, with no commits in three months, while all nine workflow actions are unpinned and a high-confidence workflow issue remains.
48%
Total Score
50
100
75
75
This is the package's only release, published 660 days ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertain for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the lack of registry releases, this is a meaningful abandonment concern.
There are four open pull requests but no new or merged pull requests in the last month, suggesting pending work without recent completion activity.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counters provide little external evidence of maturity.
The repository has no security policy. This limits the documented path for reporting vulnerabilities, though it does not alone make the package unsafe to depend on.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^10.0||^11.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.