The package has a clear README, a matching repository, stable releases, and a small dependency set. Recent repository activity has stopped, while both workflows grant broad write access and leave all three actions unpinned. The missing security policy adds a smaller transparency concern.
62%
Total Score
63
100
83
67
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Given the package's short history, this is a meaningful maintenance and abandonment concern.
The package uses a post-update-cmd lifecycle script, which adds some installation-time complexity but is not by itself evidence of poor package health.
Four releases in the last 12 months show that the package has been published and updated, but its roughly five-month history is too short to establish long-term maintenance.
There are no open issues or pull requests and no recent issue or pull-request activity; this is neutral for a small project but offers little evidence of an active user or contributor community.
The repository has only 2 stars and no forks or watchers. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of broad community validation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
livewire/livewire Version ^3.0 || ^4.0 | — | — |
spatie/laravel-medialibrary Version ^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.