Usable with caveats: the package is actively released, backed by an organization, and includes tests, but it is only 37 days old and repository activity is limited to one contributor. The missing security policy and security scanning add transparency concerns.
68%
Total Score
70
50
78
90
The package has 11 runtime dependencies, including several related Lattice components and framework libraries. This is a meaningful dependency surface but is coherent with a full-stack Laravel and React framework package.
The package is only 37 days old, but it has 53 releases in that period with the latest published today, showing unusually active development rather than abandonment. The very short history still limits maturity evidence.
All recorded recent commits come from one contributor. Organization backing reduces the risk of a permanently single-person project, but no second active contributor is shown in the collected period.
Only one commit by one active maintainer was recorded in the past three months. Recent release activity compensates for some of this limited repository history, but the maintenance record remains thin.
There are no open issues or pull requests and no recorded issue or pull-request activity in the past month. This is not evidence of abandonment by itself, but it offers little evidence of community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lattice-php/ui Version self.version | — | — |
illuminate/http Version ^11.0 || ^12.0 || ^13.0 | — | — |
lattice-php/core Version self.version | — | — |
lattice-php/form Version self.version | — | — |
lattice-php/table Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.