The project has organization backing, a clear license, tests in its repository, release notes, and dependency scanning. Its automation has a high-confidence bot-condition warning and all 12 action references are unpinned, which weakens confidence in future maintenance.
57%
Total Score
75
100
89
50
A post-autoload-dump install script is present. This is a potentially consequential install-time action, but the signal provides no evidence that it is unsafe or unusually broad.
The package has 14 releases, but none in the last 12 months and its latest registry release was about two years ago. That long pause is a meaningful maintenance concern despite the earlier frequent release cadence.
The repository recorded no commits and no active maintainers in the last three months. This supports the concern raised by the absent recent releases, although the repository was pushed more recently than that window.
There are no open issues and four open pull requests, but no new or merged pull requests in the last month. This is consistent with the broader sign of limited recent activity.
The repository has no stars, forks, or watchers. This is weak supporting evidence, but popularity alone does not determine health for a small package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^3.0-stable | — | — |
ibecsystems/admin-kit-core Version ^3.1 | — | — |
spatie/laravel-translatable Version ^6.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.