Healthy and suitable to use, with a small maintenance caveat. The release has recent versioned changes, tests, documentation, security tooling, and an active organization-backed repository, but recorded commit activity was absent over the last three months and two workflows grant write access.
78%
Total Score
88
100
94
90
No commits or active maintainers were recorded in the last three months, which is a maintenance concern; however, the repository was pushed today and five pull requests were recently merged, partially offsetting the inactivity measurement.
The repository has zero stars and only two forks, which provides little external adoption evidence, but popularity is supporting evidence and the project shows stronger direct maintenance signals.
Two workflows declare top-level write permissions and one workflow lacks top-level permissions, increasing CI token exposure compared with a least-privilege setup.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravilt/laravilt Version ^1.0 | — | — |
spatie/laravel-permission Version ^6.0|^7.0|^8.0 | — | — |
spatie/laravel-medialibrary Version ^11.0 | — | — |
spatie/laravel-package-tools Version ^1.14 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.