Usable with caveats: the package is actively released, licensed, clearly backed by its matching organization repository, and includes tests and documentation. However, the repository has had no commits for about nine months and lacks a security policy or automated security scanning, which matters for an admin and authentication package.
68%
Total Score
75
88
67
The package runs a post-autoload-dump install-time script. This is an additional installation behavior developers should review, although the signal does not show that it is dangerous.
The repository recorded zero commits and zero active maintainers in the last three months; relative to the December 2025 push, this indicates roughly nine months without observed development. For an admin package handling authentication and permissions, that is a meaningful maintenance concern.
The repository has 0 stars, 1 fork, and 1 watcher. This provides little external adoption evidence, but popularity is supporting evidence only and does not outweigh the package's release history and organization backing.
Composer build tooling is present, but no security scanning tools were detected. That is a hygiene gap for a package implementing administrator access, authentication, CAPTCHA, and notifications.
The repository has no security policy. For a security-sensitive admin package, the absence of documented vulnerability-reporting guidance lowers transparency and response confidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vonage/client Version ^4.2 | — | — |
google/recaptcha Version ^1.3 | — | — |
laravel/framework Version ^11.0|^12.0 | — | — |
livewire/livewire Version ^3.0 | — | — |
pragmarx/google2fa Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.