The package is licensed, documented, tested in its repository, and has a small runtime dependency set. A single registry maintainer and limited recent repository activity reduce confidence in long-term support.
65%
Total Score
50
100
94
67
Only one account has registry publishing access. The linked repository is user-owned rather than organization-backed, so there is little visible publishing redundancy.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, offering limited evidence of broader project backing.
The package has existed since June 2022 and released twice in the last 12 months, though its median release interval of about 299 days indicates a slow cadence.
The repository recorded zero commits and zero active maintainers during the last three months, a meaningful sign of slowing maintenance for a maintained library.
The README refers consumers to a security policy, but the repository contains no security policy file, leaving vulnerability-reporting procedures unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/semver Version ^3.3 | — | — |
illuminate/contracts Version ^12.0 || ^13.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.