The package includes a clear README, tests, a matching source repository, and an MIT license, with no deprecation or install-time scripts. Its single-user ownership, missing security scanning, and lack of established activity leave limited evidence for long-term upkeep.
62%
Total Score
50
100
89
75
Only one registry account has publish access, which limits observable publishing redundancy, though the linked individual repository provides direct ownership context.
The package and repository are owned by the same individual account rather than an organization, so long-term backing depends on one visible owner.
The package was first released today and all five releases were clustered within hours, so there is not yet enough history to demonstrate sustained maintenance.
There were no commits or active maintainers in the measured three-month period; because the repository was created today, this mainly shows that maintenance history is unproven.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^5.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/database Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.