Regular releases, tests, documentation, and an active organization-backed repository support adoption. The pre-1.0 API, limited contributor activity, and workflow permissions call for pinning this version and monitoring future releases.
68%
Total Score
67
81
50
The artifact includes an MIT license file, but the manifest declares both “MIT” and “proprietary”; that mismatch creates avoidable licensing uncertainty despite the detected MIT text.
A post-autoload-dump install script runs during Composer installation. This is a meaningful execution-time consideration, although the signal does not show that the script is harmful.
One contributor made all seven recent commits, creating a thin operational fallback; organization ownership offers some handoff capacity but no second active contributor is shown.
Seven commits were made in the last three months, showing recent activity, but all activity came from one active maintainer.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^4.0 || ^5.0 | — | — |
codenzia/laravel-sms Version ^0.2 || ^0.3 || ^0.4 | — | — |
spatie/laravel-settings Version ^3.0 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
spatie/laravel-translation-loader Version ^2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.