Initial Laraval Spa Installation
47%
Total Score
33
50
69
67
The package has 28 releases, but none in the last 12 months; its latest release was about 14 months ago. The earlier rapid release cadence does not compensate for the current inactivity.
There were no commits and no active maintainers in the last three months, consistent with the package having no releases for about 14 months. This is a substantial abandonment concern.
The package has five runtime dependencies, including Laravel Sanctum and Spatie packages. This is a moderate dependency surface for a package that installs a complete application foundation, though it increases compatibility maintenance needs.
The package runs a post-autoload-dump install-time script, which can modify or execute behavior during Composer installation. This is relevant for a framework-installation package and adds some adoption risk despite no evidence of harmful behavior here.
The repository is owned by an individual user rather than an organization, so the single registry maintainer does not benefit from visible organizational backing. This leaves a thin support structure alongside the inactive repository.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/sanctum Version ^4.0 | — | — |
illuminate/contracts Version ^10.0||^11.0||^12.0 | — | — |
spatie/laravel-permission Version ^6.17 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.