A clear MIT license, useful README, and release notes make the package easier to evaluate. The clean workflow audit and lack of install scripts reduce deployment concerns. Pin this version and plan for ownership if Filament changes.
48%
Total Score
50
71
75
The package has only two releases, both published in February 2024, and none in the last 12 months. That long release gap materially raises abandonment risk.
Only one registry account has publish access. Because the project is user-owned rather than organization-backed, this leaves a thin publishing and maintenance base.
The repository had zero commits and zero active maintainers in the last three months, consistent with the package's prolonged release inactivity.
The repository name matches the package, which supports the link, but its README does not mention the package. That weakens package-to-source transparency slightly.
The repository has only 2 stars, 0 forks, and 1 watcher, providing little evidence of a broad community that could sustain or take over maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^2.14.0 | — | — |
wire-elements/spotlight Version ^1.0 | — | — |
spatie/laravel-package-tools Version ^1.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.