A single maintainer and no commits in the last three months leave limited maintenance capacity. The repository has tests, release notes, dependency scanning, and a matching source tree, but workflow controls need attention.
58%
Total Score
50
100
94
50
Only one registry publishing maintainer is listed, which leaves limited visible publishing redundancy. The matching repository owner and active project evidence provide some compensation but do not remove the single-person dependency.
The package and repository are owned by the same individual account, so the source appears aligned with the published package, but there is no organization backing shown.
The package is about 800 days old with five releases, but only one release in the last 12 months and a median interval of about 123 days indicate a modest release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete sign of currently limited maintenance activity despite the recent release.
No security policy is present in the repository. This is a transparency gap, though Dependabot provides some compensating security tooling.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.