The MIT license, README, release notes, and organization backing provide useful transparency. The small recent release cadence and absent security policy leave less evidence for long-term support.
68%
Total Score
67
100
81
75
The package has 20 releases over about 2 years and a recent release, but only 2 releases in the last 12 months suggests a relatively modest maintenance pace.
All 3 recent commits came from one contributor, leaving maintenance highly concentrated and creating a meaningful continuity risk.
The repository recorded 3 commits in the last 3 months, showing some recent activity but not a strong maintenance cadence.
The repository name does not match the package name and its README does not mention this package, which weakens package-to-source transparency. The README does identify it as a subtree split, but the linkage remains indirect.
Composer is used for builds, but no security scanning tools were detected, leaving security-maintenance evidence limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dystcz/dystore-api Version ^1.0.15 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
filament/spatie-laravel-media-library-plugin Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.