This is a generally healthy release to depend on: it is a stable major version, not deprecated, has 40 releases over roughly 633 days with a median release interval of about 5 days, and the linked Laravel organization repository is active, correctly matched, and recently pushed. The main concern is maintenance concentration: only one commit from one active maintainer was observed in the last 3 months, although organization backing and four merged pull requests provide some compensation. The package also runs a post-autoload-dump lifecycle script and lacks repository security-scanning tooling, so review its install behavior and pin versions appropriately, but these do not outweigh the strong release and project-backing signals.
82%
Total Score
75
100
94
90
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
fakerphp/faker Version ^1.24 | — | — |
orchestra/sidekick Version ^1.2.20 | — | — |
orchestra/workbench Version ^8.17.4|^9.13.4|^10.0.3|^11.0 | — | — |
symfony/polyfill-php83 Version ^1.33 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.