Healthy and suitable to use, with minor maintenance and workflow caveats. It has active recent development, repository tests, release notes, a clear README, and a matching source repository; the main concerns are its very short release history, single registry maintainer, and incomplete workflow permission declarations.
82%
Total Score
63
100
94
80
The package uses a post-autoload-dump lifecycle script. This is a point requiring review because installation-time code can affect consumers, although the provided signal does not show that the script is dangerous.
Only one account has registry publish access. That is a real continuity concern for a user-owned project, though repository activity shows that development is currently occurring.
The registry namespace and repository are owned by the same individual user. This provides clear ownership, but not the redundancy or handoff capacity of organization backing.
Only two releases have been published over about 88 days, so the project has limited demonstrated maturity. Recent repository activity partly compensates for the short history, but long-term maintenance is not yet established.
Two contributors were active recently, with the leading contributor responsible for 68.75% of commits. This is somewhat concentrated but not a single-contributor project, so it is acceptable with limited continuity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.