This is a generally healthy, established Laravel package: it has over eight years of release history, a stable latest major version, recent releases, a matching and maintained source repository, comprehensive repository tests, minimal runtime dependencies, and sensible security/build tooling. The main concerns are that recent commit activity is very low and concentrated in one contributor, the registry has only one publishing maintainer, and no security policy is present; these raise maintenance and response-risk concerns but are not outweighed by abandonment evidence because the repository is not archived, releases remain active, and recent pull requests were merged.
78%
Total Score
60
100
100
90
Only one registry account has publishing access, creating a modest release-continuity risk; this is registry access metadata rather than evidence that only one person maintains the repository.
The repository is owned by an individual user rather than an organization, so there is no organizational backing to offset the concentrated contributor and maintainer base.
All one commit in the last three months came from a single contributor, making recent activity fully concentrated and increasing continuity risk; the repository is user-owned rather than organization-backed.
Only one commit was recorded in the last three months, so direct development activity is currently sparse and warrants caution; recent releases and merged pull requests provide partial compensating evidence.
No repository security policy was found, which reduces transparency about vulnerability reporting and response procedures.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version 6.*|7.*|8.*|9.*|10.*|11.*|12.*|13.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.