This is a promising but very young package: it has only been released for 44 days, yet has 14 stable releases, recent repository activity, a clear README and changelog, a matching source repository, a licensed MIT release, and substantial recent commit activity from two contributors. The main reservations are its limited operating history, zero observed popularity or issue activity, absence of packaged tests despite repository tests being present, no security policy or security-scanning tooling, and a single registry maintainer. Overall, the available evidence supports adoption with normal dependency review and upgrade monitoring, but it does not yet demonstrate the maturity of a long-established package.
78%
Total Score
70
100
83
90
Only one account has registry publish access, creating some publishing continuity risk. This is not contradicted by the repository evidence, which shows two active contributors, but registry access itself does not establish a broader maintainer base.
The repository is owned by a user account rather than an organization, so there is no organizational maintenance cushion evident from this signal.
The package is only 44 days old, which limits evidence of long-term maintenance, although 14 releases and a median interval of about 13 hours show active early development.
There are no issues or pull requests and no activity in the last month. This is consistent with a small, new project but leaves little evidence about support responsiveness or community use.
The repository has zero stars, forks, and watchers. Given the package's 44-day age, this is weak maturity evidence rather than a severe concern, but it provides no external adoption signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^6.0 | — | — |
laravel/framework Version ^12.0|^13.0 | — | — |
goldnead/statamic-brand-context Version ^1.13 | — | — |
goldnead/statamic-identity-contracts Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.