This is a usable, transparently packaged MIT-licensed Laravel package with a matching organizational repository, stable releases, repository tests, and no deprecation or dangerous workflow findings. However, maintenance momentum is currently weak: only two releases occurred in the last 12 months and there were no commits or active maintainers in the last three months. Missing security scanning, security policy, and explicit workflow token permissions add hygiene concerns, though the workflows show no analyzed dangerous patterns. Depend on it with moderate caution, especially if you need assurance of prompt ongoing maintenance.
62%
Total Score
63
50
83
80
The repository recorded 0 commits and 0 active maintainers in the last 3 months, a significant current-maintenance concern despite the recent repository push and release evidence.
The package declares 9 runtime dependencies, including Laravel, Google APIs, and project-specific packages; this is a meaningful integration surface but not inherently excessive for its documented functionality.
The package has existed for about 3 years and 6 months with 36 releases, but only 2 releases in the last 12 months indicate materially slower release activity than its historical cadence.
There are no open issues and four open pull requests, with one pull request merged in the last month; this shows some review activity but not a broad or consistently active maintenance process.
The repository has 0 stars and 2 forks, indicating limited external adoption or visibility. This is supporting caution only, since popularity is not required for a small stable package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
descom/pipeline Version ^2.4 | — | — |
google/apiclient Version ^2.12.1 | — | — |
laravel/framework Version ^12.0|^13.0 | — | — |
illuminate/console Version * | — | — |
illuminate/database Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.