Usable with caveats: the package is small and clearly backed, with tests, security tooling, and a clean repository, but it has had no release or commit activity for more than five years. Depend on it only if its narrow functionality remains compatible with your application.
55%
Total Score
50
100
75
83
This is a single-release package first published on May 7, 2021, with no releases in the last 12 months. The long absence of releases materially raises maintenance and compatibility risk.
The repository recorded zero commits and zero active maintainers in the last three months, after more than five years without a new release. This is the strongest evidence of abandonment risk.
The repository has only 3 stars, 0 forks, and 1 watcher, indicating limited adoption and community visibility. Popularity is supporting evidence, so this is a caution rather than a decisive risk.
The linked repository is not archived, so the project has not been formally abandoned. However, its last push was on May 7, 2021, consistent with the stale release history.
None of the three workflows declares top-level token permissions. No workflow requests top-level write access, but explicit least-privilege declarations would provide stronger assurance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spatie/laravel-medialibrary Version ^9.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.