The package has a complete Laravel application tree, tests, an MIT declaration, and a non-archived repository. Its only two releases arrived within minutes in June 2025, with no releases or commits in the following 12 months; the repository also does not identify or mention this package, and install-time scripts increase review needs.
45%
Total Score
33
100
67
67
The package has only two releases, both published in June 2025, with no releases in the last 12 months despite being about 15 months old. That is strong evidence of limited ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with no releases in the last 12 months, this materially raises abandonment risk.
The repository name does not match the package name and its README does not mention the package. Although the file tree contains a package directory, the linked source does not clearly establish ownership of this published package.
The package defines four install- and update-time Composer lifecycle scripts. These can be appropriate for a Laravel starter kit, but they increase installation behavior and review requirements.
The repository is owned by an individual user rather than an organization. That is normal for a small package, but it provides no organizational backing to compensate for the thin maintenance record.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/tinker Version ^2.10.1 | — | — |
laravel/framework Version ^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.