This release appears healthy and actively maintained: it is a stable, non-deprecated MIT-licensed package with a matching repository, substantial test and documentation coverage, recent publishing, and strong recent repository activity. The organization-owned project has four active maintainers with reasonably distributed commits, active pull-request throughput, security scanning, and no analyzed dangerous workflow patterns. Adoption still carries some operational complexity because the package declares 222 runtime dependencies, uses several install and update lifecycle scripts, lacks a repository security policy, and has one workflow without top-level permissions plus one with write access; these are cautions rather than evidence of abandonment or unfitness.
82%
Total Score
100
50
100
70
The package declares 222 runtime dependencies, creating meaningful transitive maintenance and upgrade complexity for consumers; the broad dependency surface is a practical adoption concern despite the package's active development.
The package uses four install, project-creation, or update lifecycle scripts, which increases install-time behavior and review burden even though the signal does not indicate a specific unsafe action.
No repository security policy was found, leaving vulnerability-reporting and response expectations less transparent for consumers.
Two workflows declare read-only permissions, but one lacks top-level permissions and the release workflow declares top-level write access; this warrants review of CI privileges.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/pulse Version ^1.7 | — | — |
laravel/octane Version ^2.3 | — | — |
laravel/reverb Version ^1.0 | — | — |
laravel/tinker Version ^3.0 | — | — |
laravel/horizon Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.