This is a newly published, stable v1.0.0 package with a matching repository, a substantial README, tests in both the artifact and repository, an explicit MIT license, and no install-time scripts or dangerous workflow patterns. However, it has only one release and is zero days old, so maintenance history is unproven; the repository has no commits or active maintainers measurable over the last three months, has no security policy, and its CI workflow does not declare top-level token permissions. The package is reasonable to evaluate for use, but adoption should account for its lack of demonstrated longevity and limited security-process transparency.
68%
Total Score
63
100
83
80
One registry account has publish access. This is a limited publishing base, but the linked repository is owned by the same individual account, so the count is not independently evidence of abandonment.
The repository is owned by a user account rather than an organization, so there is no evidence of organizational backing or a broader maintenance team.
There is only one release and the package is 0 days old, so there is no demonstrated release cadence or maintenance history yet.
No commits or active maintainers are measured over the last three months, but this window predates or coincides with the package's first release, so it mainly shows that ongoing maintenance is unproven rather than established abandonment.
The repository has zero stars, forks, and watchers. This offers no community validation, but popularity is supporting evidence and the package is newly published, so it is a caution rather than a severe health failure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^5.0 | — | — |
laravel/framework Version ^13.0 | — | — |
livewire/livewire Version ^4.1 | — | — |
geekcodev/max-php-client Version ^1.0.9 | — | — |
geekcodev/laravel-max-client Version ^1.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.