This is a healthy-looking but very young package with strong evidence of active development and reasonable release hygiene. It has 27 stable releases over 46 days, was pushed very recently, has substantial recent commit activity from two contributors with balanced participation, a matching repository, documented licensing, README and changelog coverage, repository tests, a security policy, and read-only workflow permissions. The main reservations are its short operating history, zero public popularity metrics, a single registry maintainer, and the absence of automated security scanning; these reduce maturity and transparency somewhat but do not outweigh the current maintenance evidence.
82%
Total Score
80
100
83
100
Only one account has registry publish access, which creates publishing concentration; however, registry access is administrative evidence and does not outweigh the repository's observed two-contributor activity.
The repository is owned by the named individual goldnead rather than an organization, so there is no organizational maintenance redundancy; this is consistent with, but does not independently worsen, the observed two-contributor activity.
Twenty-seven releases in the first 46 days demonstrates active publishing, but the very short package history means long-term maintenance is not yet established.
The repository has zero stars, forks, and watchers, so there is no external adoption evidence; given the package is only 46 days old, this is a maturity concern rather than a severe health failure.
Composer build tooling is present, but no security-scanning tool was detected. The missing scanning is a hygiene gap, though it is partly offset by the repository's other security controls.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^6.0 | — | — |
laravel/framework Version ^12.40|^13.0 | — | — |
inertiajs/inertia-laravel Version ^2.0 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.