Laravel package for storing model versions
62%
Total Score
caution
Usable with caveats: releases and commits have stalled, and a workflow has a high-confidence automation flaw.
A post-autoload-dump install lifecycle script is present. This adds execution during installation, but the signal provides no evidence that the script is unsafe or unusually broad.
Registry publishing access is held by one maintainer. For a user-owned project this is a limited bus factor, though repository activity provides some compensating evidence.
The repository is owned by an individual account rather than an organization, so the single-maintainer finding is not offset by visible organizational backing.
The latest recorded release was on November 15, 2024, with no releases in the last 12 months at collection time. That is a meaningful maintenance concern for a package still described as under development.
There were no commits and no active maintainers in the last three months. The recent repository push is positive context, but it does not offset the current lack of commit activity completely.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^9.0|^10.0|^11.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
fidum/laravel-eloquent-morph-to-one Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.