The package includes a README and tests, with a clear MIT declaration and no deprecation notice. Frequent releases show ongoing work, but the project remains young and lacks security scanning.
63%
Total Score
67
79
50
The package runs four Composer lifecycle scripts, including post-create-project-cmd. These are plausible for a Laravel project template but increase installation complexity and require trust in the package's setup behavior.
The package and repository are owned by the same individual account, providing direct ownership but no organizational backing to compensate for the concentrated maintainer base.
There have been 20 releases in 150 days, with the latest released very recently, showing active maintenance. The extremely compressed release intervals also suggest a young project with a rapidly changing release process.
All 9 recent commits came from one contributor, leaving the project dependent on a single maintainer and reducing continuity if that person becomes unavailable.
Composer build tooling is present, but no security-scanning tool was detected. That leaves less automated coverage for dependency and release risks.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/octane Version ^2.17 | — | — |
laravel/tinker Version ^3.0 | — | — |
laravel/framework Version ^13.0 | — | — |
spiral/roadrunner-cli Version ^2.7 | — | — |
spiral/roadrunner-http Version ^4.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.