Low adoption and a single registry maintainer limit confidence in long-term support. The repository has tests, a changelog, a license, and a security policy, but its workflows use eight unpinned actions and two have broad write permissions.
62%
Total Score
38
100
83
75
The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance for a package with only one release.
A post-autoload-dump script runs during installation, which adds some installation complexity, but this signal alone does not show unsafe or unusual behavior.
One registry maintainer means publishing access is concentrated in a single person, leaving limited visible redundancy for release support.
The repository is owned by an individual account rather than an organization, so the single-person registry maintenance model is not offset by visible organizational backing.
Only one release has been published, on March 2, 2026, so there is little release history from which to judge sustained maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^5.0 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.