The only release dates from May 2022, with no releases in the last 12 months and no commits in the last three months. It has a clear MIT license and tests in the repository, but its workflows include high-confidence bot-condition and unpinned-image findings.
18%
Total Score
25
100
71
67
This is the sole release, published about 4 years ago, with no releases in the last 12 months. That strongly indicates the package is no longer maintained.
The repository recorded 0 commits and 0 active maintainers in the last three months, reinforcing the abandonment concern rather than compensating for it.
The linked repository is archived, and its last push was on October 9, 2023; archived source is a severe abandonment risk for a dependency.
The repository is owned by an organization, which can support project continuity, but the concrete archived status and absent recent activity outweigh that backing context.
The repository has no security policy, which leaves reporting and response expectations undocumented; this is an additional transparency gap alongside the repository's inactive state.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^9.0 | — | — |
spatie/data-transfer-object Version ^3.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.