An highly opinionated polymorphic role / permission package
63%
Total Score
caution
Usable with caveats: recent commits have stopped and workflow actions are entirely unpinned.
A post-autoload-dump install lifecycle script runs during installation, adding some execution surface, though this signal alone does not show unsafe behavior.
The repository is owned by an individual account matching the registry namespace, so ownership is consistent but depends on a single project owner.
The package is 712 days old with 29 releases, but only 2 releases appeared in the last 12 months, indicating a slower maintenance pace.
The repository recorded zero commits and zero active maintainers in the last 3 months, a concrete sign that current maintenance has paused.
There are no open issues and three open pull requests, but no issues or pull requests were merged in the last month, which provides limited evidence of active maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^10.0||^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.