This is a young but currently healthy Laravel package with a stable v1.1.1 release, active recent development, a matching and documented source repository, repository tests and changelog, security policy, Dependabot scanning, and no deprecation or archival indicators. The main reservations are its short 80-day history, very small popularity footprint, concentration of activity among only two contributors, one registry maintainer, and workflows that do not declare top-level token permissions; these are manageable maturity and hardening concerns rather than evidence of abandonment. The package artifact omits tests and a changelog, but the repository contains both, which compensates for that packaging gap.
82%
Total Score
70
100
89
80
A post-autoload-dump install-time script is present. This is a limited operational consideration for a Composer package, but no broader lifecycle-script risk is shown.
Only one account has registry publish access, which limits publishing redundancy. The linked repository is user-owned rather than organization-owned, so there is no organizational backing signal to offset this concentration.
The linked repository is owned by the same individual associated with the package and is user-owned, giving clear ownership context but no organization-level maintenance redundancy.
The package is only 80 days old with four releases, but it has released four times in the last 12 months and the latest release was published recently, indicating active early maintenance rather than abandonment.
Two contributors were active in the last three months; the leading contributor made 62.96% of commits, so activity is somewhat concentrated but not dependent on a single contributor.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.