The package has had no new release for about three years and five months, with no commits in the last three months. Its repository includes tests, a changelog, licensing, and dependency scanning, but workflow permissions and automation need care.
58%
Total Score
38
100
83
67
This is the only release, published about three years and five months ago, with no releases in the last 12 months. That substantially raises the risk of stale compatibility and abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the stale release history and weakening confidence in ongoing maintenance.
A post-autoload-dump install script is present. This is a routine Composer lifecycle hook, but it increases install-time execution surface slightly.
One registry maintainer is consistent with the linked repository being owned by the same individual, but it leaves little visible redundancy if that maintainer stops work.
The package and repository are owned by the same individual user rather than an organization, so the single-maintainer and low-activity concerns are not offset by visible organizational backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^10.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.