The package has tests, a release record, and no install-time scripts. Its single-release history, nearly two years without commits, missing license, and uncertain repository identity make long-term adoption risky.
38%
Total Score
25
100
57
75
This is the only release, published nearly two years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance.
There were no commits and no active maintainers in the last three months, despite the repository being available. Combined with the single-release history, this is strong evidence of abandonment risk.
No license declaration or license file was found in the package or linked repository. This creates a material adoption and redistribution concern.
The source repository is owned by an individual account rather than an organization, so there is no visible organizational backing to offset the single-maintainer and inactivity concerns.
The repository name does not match the package name, and no README package mention was available. A subpackage or monorepo mismatch is possible, but the package-to-repository link is not clearly established.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spatie/laravel-permission Version ^6.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.