It has clear documentation, tests in the repository, a license, and a recent release supporting current Laravel versions. The single-person project has had no commits in three months, while workflow controls need tightening. Pin this version if adopting it.
62%
Total Score
50
100
94
88
Only one registry maintainer is listed, which creates a limited publishing bus factor. The linked repository and matching package ownership provide some continuity but do not remove the single-person risk.
The repository is owned by an individual user rather than an organization, so the single-maintainer concern is not offset by visible organizational backing.
The package is about 2 years and 5 months old with 8 releases, but only 1 release in the last 12 months. The latest release is recent, partly offsetting the slower cadence.
There were no commits and no active maintainers in the last three months. This is a meaningful sign of currently quiet maintenance, although the recent release and July push provide some compensating evidence.
There are no open issues and five open pull requests, but none were created or merged in the last month. The unmerged pull requests reinforce the recent lack of active maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^10.0||^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.