Laravel 11 Shopping cart
68%
Total Score
caution
Usable with caveats: maintenance is thin, with one recent commit from one contributor.
One contributor made all commits during the last three months, leaving maintenance concentrated in a single active account. That creates a meaningful continuity risk for a user-owned project.
Only one commit was recorded in the last three months, so current maintenance activity is present but sparse. This lowers confidence in rapid issue response.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide little external evidence of community depth.
Composer build tooling is present, but no security-scanning tooling was detected. The build setup is adequate, while automated security coverage is limited.
No repository security policy was found. This is a transparency and response-process gap, though it is not by itself evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version 5.0.*|5.1.*|5.2.*|5.3.*|5.4.*|5.5.*|5.6.*|5.7.*|5.8.*|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/validation Version 5.0.*|5.1.*|5.2.*|5.3.*|5.4.*|5.5.*|5.6.*|5.7.*|5.8.*|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/translation Version 5.0.*|5.1.*|5.2.*|5.3.*|5.4.*|5.5.*|5.6.*|5.7.*|5.8.*|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.