This is a usable, clearly packaged Laravel dependency with an MIT license, README, tests, a small and understandable file tree, stable v1.1.5 releases, no deprecation, and an active non-archived repository owned by an organization. However, the project is young at 217 days, has had seven releases with a highly compressed median interval of about 21 hours, and reports no commits or active maintainers in the last 3 months, which creates maintenance-continuity risk despite the recent release and repository push. The absence of security scanning and a security policy are additional transparency gaps, while the zero-star count is only weak supporting evidence rather than a decisive concern.
68%
Total Score
75
100
83
90
The package is young at 217 days and has seven releases, with a median release interval of about 21 hours; this shows active initial iteration but limited evidence of long-term maintenance stability.
The repository reports zero commits and zero active maintainers in the last 3 months, which materially weakens confidence in ongoing maintenance, even though the repository was recently pushed and the registry has a recent release.
There are no open issues or pull requests and no issue or pull-request activity in the last month; this is ambiguous for a young, small package and provides little evidence of an active user-maintainer feedback loop.
The repository has zero stars, forks, and watchers. This is weak supporting evidence of limited external adoption, but popularity alone does not establish that the package is unsafe to depend on.
Composer build tooling is present, but no security scanning tools are configured, leaving a repository security-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.