The repository was pushed recently, but the package has had no registry release in over a year and no commits in the last three months. Its proprietary license and lack of tests or security scanning add adoption and maintenance concerns, despite a clear README and stable versioning.
58%
Total Score
50
50
69
75
The manifest declares the package proprietary, with no detected license and no license file in either the artifact or repository. That materially limits transparency and may restrict normal open-source use.
The package has two runtime dependencies and no development dependencies, a small direct dependency surface. The absence of development dependencies also leaves no declared test tooling to support validation.
The package has had 8 releases since December 2024, but none in the last 12 months; the latest registry release was over a year ago. This indicates stalled publishing even though the repository was pushed more recently.
There were no commits and no active maintainers in the three months before collection. This is a meaningful recent-maintenance gap, although the repository's later push timestamp provides some compensating evidence of continued activity.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide little external evidence of maturity or broad review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
stancl/tenancy Version ^3.6 | — | — |
laravel/framework Version ^10.00 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.