Usable with caveats: it is a small, clearly identified Laravel package with a license, tests in its repository, and no deprecation or dangerous workflow findings. However, the last release was over three years ago and there has been no commit activity in the past three months, so ongoing compatibility support is uncertain.
62%
Total Score
67
100
83
80
One registry account has publish access. Because the repository is individually owned, a single registry maintainer is not inherently abnormal, but it leaves limited visible publishing redundancy.
The package has had no releases in the last 12 months, and its latest release was over three years ago. That materially raises the risk of stale compatibility, despite the package having six releases since publication.
There were zero commits and zero active maintainers in the past three months. Combined with the long gap since the latest release, this is the main evidence that maintenance may have stalled.
The repository has zero stars and forks and only one watcher. This is weak supporting evidence of community adoption, but popularity alone does not make a small, focused package unsafe to use.
The repository uses Composer build tooling but has no security-scanning tools. For a small PHP package this is a hygiene limitation, though the build tooling and repository tests provide some compensating structure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version >=5.6 | — | — |
illuminate/contracts Version >=5.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.