The package is a very small six-file component with no tests or consumer README, and its repository has no security policy or scanning. MIT licensing, no install-time scripts, and an unarchived repository reduce the concern, but the long period without a release leaves maintenance uncertain.
38%
Total Score
50
50
61
67
The latest release was published in December 2020, and there have been no releases in the last 12 months despite the package being over five years old. This is strong evidence of abandonment risk, though the repository is not archived.
The package declares eight runtime dependencies, including several related Laravel packages and external components. This creates a relatively broad dependency surface for a six-file package, increasing maintenance coupling.
The package contains only six files, consisting of a provider, model, trait, migrations, and manifest. That may fit a narrowly scoped Laravel component, but it provides little evidence of testing or broader project maturity.
The artifact has no README, tests, or changelog, while the linked repository also reports no tests or changelog. The GitHub release for this version is positive, but it does not compensate for the lack of consumer documentation and validation.
The repository is owned by an individual rather than an organization, and no organizational backing is shown. Combined with the single registry maintainer, this leaves limited visible maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
kalnoy/nestedset Version ^5.0 | — | — |
illuminate/support Version ~5.8.0|^6.0|^7.0|^8.0 | — | — |
larangular/support Version ^0.2.0 | — | — |
larangular/installable Version ^0.2.0 | — | — |
spatie/laravel-sluggable Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.