This is a promising but very young package with strong basic hygiene: it is MIT-licensed, includes substantial documentation, tests, a changelog, CI workflows, and no install-time lifecycle scripts. The repository is not archived, was pushed recently, matches the package, and the release is on a stable major version, but the package has only 28 days of history, just four releases, one active contributor, and all recent commits come from that contributor. The absence of security scanning, a security policy, and explicit workflow token permissions adds governance risk. It is reasonable to evaluate for use, but dependency adopters should monitor maintenance and repository activity closely.
68%
Total Score
50
100
83
80
One registry maintainer, Finity Labs, is consistent with the linked repository owner being a user account, but it leaves little publishing redundancy.
The repository is owned by the user account finity-labs rather than an organization, so there is no organizational maintenance handoff evidence to offset the concentrated contributor base.
The package is only 28 days old with four releases, and releases are clustered with a median interval of roughly 2 hours 14 minutes. This shows active early iteration but provides limited evidence of long-term stability.
One contributor made all three commits in the last three months, creating a concentrated maintenance dependency and a meaningful continuity risk.
Three commits occurred in the last three months and the repository was recently pushed, showing ongoing activity; however, the small volume limits confidence about sustained maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^4.0|^5.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.