The package has a clear MIT license, documentation, changelog, and release notes for this version. Organization ownership and a matching repository provide useful continuity, but the project shows limited recent activity and incomplete security hygiene.
62%
Total Score
67
93
75
The package has 51 releases over about 21 months and a current release, but only 2 releases in the last 12 months suggests a slower recent cadence.
All recent commits came from one contributor, creating a concentrated maintenance path; organization ownership provides some ability to hand off maintenance.
Only 2 commits were recorded in the last 3 months, indicating limited recent maintenance activity.
The repository has no security policy, leaving reporting and response expectations undocumented for a package that exposes an API layer.
The single analyzed workflow uses a pull_request_target trigger without an untrusted checkout or script injection, but its only action reference is unpinned. No high- or medium-confidence audit findings were reported.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lunarphp/lunar Version 1.5.0-beta.6 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
laravel-json-api/hashids Version ^3.2 | — | — |
laravel-json-api/laravel Version ^5.1 | — | — |
laravel-json-api/non-eloquent Version ^4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.