Healthy and reasonable to adopt, with some maturity caveats. It has a clear MIT license, strong documentation, release notes, tests and CI-backed project structure, but is only 55 days old and all recent commits come from one contributor.
78%
Total Score
63
89
90
The package uses a post-autoload-dump install-time script. This is an additional installation behavior to review, though the signal does not show a dangerous workflow or malicious action.
The package is only 55 days old and has three releases, all published within about three hours, so its long-term maintenance record is still limited.
One contributor made all nine recent commits. Organization ownership provides some handoff capacity, but no second active contributor is evidenced, leaving continuity dependent on a single individual.
The repository recorded nine commits in the last three months, showing active early development, but all activity came from one maintainer.
There are no open issues or pull requests and no recent issue or pull-request activity. For a package this new, that is not by itself evidence of abandonment, but it provides little additional evidence of community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/schemas Version ^4.0|^5.0 | — | — |
filament/support Version ^4.0|^5.0 | — | — |
filament/widgets Version ^4.0|^5.0 | — | — |
filament/filament Version ^4.0|^5.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.