The repository includes tests, a security policy, and clean workflow checks. Single-person ownership and limited demonstrated history leave maintenance capacity unproven, so pin this version and watch updates.
68%
Total Score
50
100
88
83
The package uses a post-autoload-dump install lifecycle script. This adds some installation complexity, but the signal alone does not show unsafe behavior or an adoption-blocking problem.
Only one registry publishing account is listed, so publishing continuity depends on one person. The repository is also user-owned rather than organization-backed, leaving limited demonstrated maintenance capacity.
The registry namespace and repository owner match, but both identify an individual user rather than an organization. This supports ownership consistency while offering limited evidence of institutional backing.
The package is 0 days old with only 3 releases, all published within roughly 20 minutes. That shows active initial publishing but provides little evidence of long-term maintenance or release stability.
There were 0 commits and 0 active maintainers in the preceding 3 months. Because the repository is only 0 days old and was pushed recently, this is mainly limited history rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^5.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.