The package has an MIT license, a useful README, repository tests, and a matching source repository. Workflow references are unpinned, and the repository has no security policy, leaving avoidable maintenance and build-trust gaps.
66%
Total Score
50
100
79
75
The registry namespace and repository are owned by the same individual, so the package has direct ownership continuity but no organizational backing to offset its single-maintainer concentration.
The package has existed for 1,994 days but only has five releases, with a median interval of about 531 days and one release in the last year. The recent release shows it is not abandoned, but maintenance is infrequent.
One contributor made all commits in the last three months, giving the project a top-contributor share of 100%. This creates a meaningful continuity risk for a user-owned project.
Only one commit was recorded in the last three months, from one active maintainer. Recent activity exists, but the volume is too low to demonstrate strong maintenance capacity.
There is one open issue and one open pull request, but no issues or pull requests were opened or merged in the last month. This supports only limited evidence of ongoing community activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/database Version ^9.0 || ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
barryvdh/laravel-ide-helper Version ^2.9 || ^3.0 | — | — |
astrotomic/laravel-translatable Version ^11.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.