The artifact includes tests, a changelog, and no install-time scripts. Its single-user ownership, absent security scanning, and unclear repository-to-package relationship provide limited ongoing oversight.
43%
Total Score
33
50
61
83
The latest release was published over three years ago, with no releases in the last 12 months despite 200 total releases; this indicates a stalled release line.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing prolonged inactivity.
The package has six runtime dependencies, including Laravel and file-management components. This is a meaningful integration surface but not unusually large for a Laravel module.
Only one registry account has publishing access. That is a thin publishing base and increases continuity risk, with no organizational backing shown to compensate for it.
The registry namespace and repository owner are the same individual account, but the backing is user-owned rather than organizational. This does not compensate for the thin maintainer base.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version 5.8.* | — | — |
laravelcollective/html Version ^5.8 | — | — |
nwidart/laravel-modules Version ^4.1 | — | — |
unisharp/laravel-filemanager Version ^1.9 | — | — |
joshbrw/laravel-module-installer Version ^0.1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.