The source includes tests, a clear MIT license, and extensive automated checks. Maintenance has slowed: no registry releases in 15 months, no commits in the past 3 months, and 23 open pull requests with none merged recently. A single individual publishes the package, so ongoing support capacity is limited.
62%
Total Score
50
100
94
75
Only one registry account has publish access. Because the repository is owned by an individual rather than an organization, this leaves limited visible publishing redundancy.
The package and repository share the same individual owner, confirming ownership alignment but not providing organizational backing or a broader support structure.
Only four releases were published, with no registry releases in the past 12 months; the latest release is about 15 months old. This indicates a slow or stalled release cadence for a starter kit tied to a fast-moving framework.
There were no commits from active maintainers in the past 3 months. The recent repository push is a compensating maintenance signal, but the sustained commit count still warrants concern.
The repository has 23 open pull requests, with five opened in the past month but none merged, plus one open issue. That backlog suggests review or integration capacity is currently constrained.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/tinker Version ^v2.10.1 | — | — |
laravel/pennant Version ^v1.17 | — | — |
laravel/framework Version ^v12.19 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.