Production-ready Laravel migrations with web dashboard, auto-diff, drift detection, automatic backups, and safe rollback. 909 tests with 100% coverage.
58%
Total Score
caution
No commits in three months, only two releases, and all five workflow actions are unpinned.
There were zero commits and zero active maintainers in the last three months, while the latest push was about 11 months ago. This is the strongest evidence of currently weak maintenance activity.
The package defines a post-autoload-dump lifecycle script. Install-time execution deserves some review, but this signal does not show that the script is harmful or unusually broad.
Only one registry account has publish access. The linked repository is owned by the same individual, so this is coherent but leaves a limited publishing and maintenance base.
The repository is owned by a user rather than an organization, so there is no organizational backing shown to compensate for the single maintainer.
The package is 368 days old with only two releases, one in the last 12 months, and the latest release was about 11 months ago. This indicates a thin and slowing release history for a package with substantial functionality.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0||^12.0 | — | — |
illuminate/contracts Version ^11.0||^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.