Clear licensing, tests, documentation, and a substantial source tree support the release. However, the project has had no recorded commits or releases for more than three years, with no security policy and weak repository adoption.
43%
Total Score
0
75
67
The package is about 3 years and 8 months old, has only 3 releases, and has had no release in the last 12 months. This is strong evidence that maintenance has stopped.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and increasing abandonment risk.
The repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption signal to offset the inactivity.
The repository has no security policy. This is a transparency and maintenance gap, although it is less significant than the prolonged inactivity.
The single workflow uses a pull_request_target trigger without an untrusted checkout or script injection, so the trigger is not dangerous on its own. Its only action reference is unpinned, which is a modest supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lunarphp/core Version self.version | — | — |
livewire/livewire Version ^2.0 | — | — |
lunarphp/licensing Version dev-main | — | — |
barryvdh/laravel-dompdf Version ^2.0 | — | — |
lunarphp/livewire-tables Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.