The package has a clear license, tests, documentation, and release notes for this version. Its workflow audit found no dangerous patterns, but unpinned actions and no security policy leave modest transparency and build-hygiene gaps.
63%
Total Score
50
81
75
The repository is owned by an individual user rather than an organization, so the single-contributor concentration has no visible organizational handoff support.
The package has been maintained for about six years with 75 releases, but only one release in the past 12 months indicates a slower recent cadence.
All three recent commits came from one contributor, leaving maintenance dependent on a single active person.
The repository has three commits in the past three months, showing recent activity, though the volume is modest for a large package.
Composer build tooling is present, but no security scanning tooling was detected, leaving a modest project-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^2.6|^3.0|^4.0 | — | — |
dcat/easy-excel Version ^1.1 | — | — |
laravel/framework Version ~9.0|~10.0|~11.0|~12.0|~13.0 | — | — |
spatie/eloquent-sortable Version ^3.0|^4.0|^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.