Usable with caveats: the package is licensed, documented, not deprecated, and has recent releases and commits. It is young and maintained entirely by one person, with no security policy or repository activity beyond that maintainer.
68%
Total Score
60
100
83
90
Only one registry account has publish access. That is a limited publishing base, although repository ownership and activity also point to the same individual rather than an organization-backed team.
The repository is owned by an individual account rather than an organization, and the provided evidence does not show broader project backing. This makes the single-maintainer risk more significant.
The package is only 147 days old but has seven releases, including releases within the last 12 months. This shows active early maintenance, though the short history limits maturity evidence.
One contributor made all six commits in the last three months, creating a high continuity risk if that person stops maintaining the package. The repository owner is an individual, so no organizational handoff is evidenced.
There are no open issues or pull requests and no recent issue or pull-request activity. This is not inherently unhealthy for a young package, but it provides little evidence of community review or support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^4.0|^5.0 | — | — |
maatwebsite/excel Version ^3.1|^4.0 | — | — |
spatie/laravel-package-tools Version ^1.92 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.