The project has clear documentation, tests in its repository, a license, and recent release activity. Maintenance has gone quiet for three months, while all 12 workflow actions are unpinned and one workflow has a high-confidence bot-condition warning.
62%
Total Score
33
100
94
67
The repository recorded zero commits and zero active maintainers during the last three months. For a young package, this is a meaningful sign that maintenance has paused.
The package runs a post-autoload-dump lifecycle script during installation. This adds some installation behavior to review, but the signal provides no evidence that it is harmful or unusually broad.
The repository is owned by an individual account rather than an organization, so the project has limited visible backing beyond one owner. This increases reliance on a single maintainer when combined with the lack of recent commits.
There have been two releases within roughly two days, with the latest release about seven months before collection. The short history limits evidence of long-term maintenance, despite the recent initial activity.
There are no open issues and two open pull requests, but no issues or pull requests were merged in the last month. This offers limited evidence of ongoing project response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version ^7.0 | — | — |
illuminate/contracts Version ^11.0||^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.