The package has clear licensing, useful documentation, a matching source repository, and a documented security contact. Its small contributor base and bursty release timing leave less evidence of long-term resilience.
84%
Total Score
80
100
94
83
A post-autoload-dump script is present, which is common in Composer packages but adds install-time behavior that should be understood by consumers.
One registry maintainer is consistent with the repository being owned by the same individual, though it leaves limited publishing redundancy.
Two contributors are active, with the top contributor responsible for 62.5% of recent commits; this is somewhat concentrated but not a single-person project.
Version 3.2.0 is marked as a stable major and is not a prerelease; the reported latest-version value is inconsistent with the assessed version, reducing confidence in this particular metadata.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jeffersongoncalves/laravel-gtag Version ^2.0 | — | — |
jeffersongoncalves/filament-analytics-core Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.