simple translation sync between Laravel and any frontend framework.
61%
Total Score
50
100
88
67
A post-autoload-dump lifecycle script runs during Composer installation, adding install-time behavior that consumers should understand before adoption.
Registry publishing access is held by one maintainer account, so continuity depends heavily on a single individual.
The repository is owned by an individual rather than an organization, so the single-maintainer concern is not offset by visible organizational backing.
The package has only three releases, with the latest published more than a year ago and no releases in the last 12 months. This limits evidence of ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long period since the latest release and reducing evidence of current care.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^10.0||^11.0||^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.