Usable with caveats: the package is licensed, documented, non-deprecated, and has a small focused dependency set, but it has only one release and no recorded commits in the last three months. Its tiny repository and lack of security tooling make long-term maintenance less reassuring.
58%
Total Score
33
100
78
88
There were zero commits and zero active maintainers in the three months before collection, indicating no recent maintenance activity and increasing the risk that compatibility issues will go unaddressed.
One registry publishing account indicates a narrow operational base; this is a modest concern for continuity, though the repository is backed by the corresponding individual owner rather than an unexplained third-party account.
The repository is owned by an individual user rather than an organization, consistent with the single registry maintainer and providing limited evidence of institutional continuity.
Only one release exists, published about 16 months before collection, so there is little evidence of release maturity or ongoing delivery.
The repository has zero stars and forks and one watcher, offering little community evidence or external review. This is supporting evidence only, so it does not by itself make the package unsafe to use.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^12.0 | — | — |
spatie/laravel-query-builder Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.