The README is substantial and release notes document this version, while the dependency set is small and installation has no lifecycle scripts. Unpinned workflow actions and the lack of a security policy add maintenance and supply-chain hygiene concerns.
15%
Total Score
0
50
75
Packagist marks the entire package as abandoned and names marcorieser/statamic-livewire as its replacement, making continued dependency adoption a severe concern.
The package has 39 releases and a historically regular cadence, but it has had no releases in the last 12 months and its latest release is from October 2024.
There were no commits and no active maintainers in the last 3 months, reinforcing the abandonment signal from the archived repository.
The linked repository is archived, which is a strong sign that upstream maintenance has ended even though it was last pushed in January 2025.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that is already showing signs of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^4.23.2|^5.0 | — | — |
livewire/livewire Version ^3.0 | — | — |
illuminate/support Version ^10.0|^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.