The clear README, MIT license, and matching repository make the package transparent to consumers. Maintenance has stopped since February 2025, while the repository lacks a security policy and pins none of its three GitHub Actions references. Its workflow audit found no dangerous triggers or high-confidence findings.
48%
Total Score
33
100
72
67
The package has only two releases, both published in February 2025, and none in the last 12 months. This is strong evidence of limited maintenance for a package still being considered for adoption.
The repository recorded zero commits and zero active maintainers over the last three months, following its February 2025 push. This materially raises abandonment risk.
The repository is owned by an individual user rather than an organization. That is not inherently unhealthy, but it offers no organizational backing to compensate for the inactive commit history.
There were no new or closed issues and no pull-request activity in the measured month. This adds to the picture of an inactive project, although the open-issue count is unknown.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no community evidence to offset the lack of maintenance activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^3.0.0-stable | — | — |
maatwebsite/excel Version ^3.1 | — | — |
anourvalar/eloquent-serialize Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.