The README and focused dependency set make the package understandable to integrate. Its young release history and no commits in the last three months leave maintenance capacity unproven; no tests or security scanning add uncertainty.
58%
Total Score
0
100
81
50
There were no commits and no active maintainers in the last three months, despite the repository having been pushed around the latest release. This is the strongest evidence that ongoing maintenance is currently unproven.
Only three releases were published, clustered within about two days, and the latest was about seven months ago. This suggests an early project with no demonstrated long-term maintenance cadence.
Composer is used for builds, but no security-scanning tools are configured. That is a meaningful transparency and maintenance gap for a package intended to run inside Laravel applications.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a hygiene gap, not evidence that the package is unsafe.
Version v0.2.3 is not a stable-major release, so its API may still change. It is not marked as a prerelease, which provides some compensation.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^12.0 | — | — |
livewire/livewire Version ^4.0 | — | — |
robsontenorio/mary Version ^2.0 | — | — |
spatie/livewire-filepond Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.