This is a young but currently healthy release with strong maintenance and repository transparency signals. It has nine releases in 36 days, 45 commits from two active contributors in the last three months, a non-archived repository pushed recently, a stable non-prerelease version, a matching repository with a README reference, and a documented security policy. The artifact includes a README, changelog, license, and no install-time lifecycle scripts; repository tests and CI compensate for tests not being packaged. The main concerns are limited project history, zero repository popularity, one registry maintainer, no configured security-scanning tool, and one open pull request, but none indicates abandonment or an immediate dependency-health failure.
82%
Total Score
70
100
83
100
Only one account has registry publish access, which creates some publishing continuity risk; repository activity from a second active contributor provides partial operational support but does not remove the single-publisher concentration.
The repository is owned by the individual user goldnead rather than an organization, so there is no organizational succession backing; active two-person commit activity partially offsets this limitation.
Nine releases in 36 days, with a median interval of about 3 days, demonstrate active publishing, although the package's 36-day age leaves limited evidence of long-term durability.
There are no open issues and one open pull request, with no issues or pull requests merged in the last month; the lack of issue backlog is positive, while the limited collaboration history is mildly cautionary.
The repository has zero stars, forks, and watchers, so there is no external adoption evidence; this is a supporting weakness rather than a health verdict for a young package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^6.0 | — | — |
laravel/framework Version ^12.40|^13.0 | — | — |
goldnead/statamic-brand-context Version ^1.13 | — | — |
goldnead/statamic-identity-contracts Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.