Its 249-character README leaves usage marked “TODO,” and the package has no tests or security policy. Organization ownership and a declared license provide useful accountability, but they do not offset the weak project transparency.
48%
Total Score
50
71
75
The latest release was on May 8, 2023, with no releases in the last 12 months. Although 19 releases show earlier activity, the prolonged release gap is a meaningful maintenance concern.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the registry's long period without releases and raising abandonment risk.
The package includes a README, but it is only 249 characters and leaves usage as “TODO”; no tests or changelog are present. Missing tests and changelog are normal for published artifacts, while the incomplete consumer documentation remains a transparency gap.
The linked repository name does not match the package name and its README does not mention the package. Even though the repository is under the matching Morning-Train organization, the lack of an explicit package reference makes source ownership less transparent.
The linked repository has no security policy, leaving vulnerability reporting and handling expectations undocumented. This is a hygiene gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^5.8|^6.0|^7.0|^8.0|^9.0|^10.0 | — | — |
illuminate/console Version ^5.8|^6.0|^7.0|^8.0|^9.0|^10.0 | — | — |
illuminate/support Version ^5.8|^6.0|^7.0|^8.0|^9.0|^10.0 | — | — |
illuminate/database Version ^5.8|^6.0|^7.0|^8.0|^9.0|^10.0 | — | — |
morningtrain/laravel-fields Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.