The repository includes tests, a changelog, a clear README, and read-only workflow permissions. Its single-maintainer setup and fully unpinned 12 workflow actions leave limited operational and maintenance margin.
62%
Total Score
50
50
79
67
Six runtime dependencies, including Statamic, Laravel, dompdf, and two related packages, create meaningful compatibility coupling but fit the package's stated integration role.
One registry maintainer provides little publishing redundancy, although the linked repository is owned by the same individual and is not presented as organization-backed.
The repository is owned by a user rather than an organization, so there is no visible organizational backing to offset the single-maintainer structure.
The package is only 1 day old with 3 releases, so there is not yet enough history to establish sustained maintenance or release reliability.
There were 0 commits and 0 active maintainers in the last 3 months; because the repository is only about 1 day old, this is weak evidence of abandonment but still provides no established maintenance record.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^6.0 | — | — |
dompdf/dompdf Version ^3.1 | — | — |
laravel/framework Version ^12.40|^13.0 | — | — |
goldnead/statamic-courses Version ^0.1 || ^0.2 || ^0.3 | — | — |
goldnead/statamic-brand-context Version ^1.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.