Roles and permissions
57%
Total Score
caution
Usable with caveats: no commits in the last 3 months and a high-confidence workflow audit finding.
Only one account has registry publish access, and the project is user-owned rather than organization-backed. This creates a narrow publishing and maintenance base.
The artifact includes a README and changelog, while the repository contains tests and a changelog; the missing artifact tests are normal packaging practice. The README still contains unfilled template placeholders, limiting consumer-facing clarity.
The package published 22 releases in its first six days, then shows no releases in the remaining roughly 11 months of its recorded age. That burst followed by a long release gap weakens confidence in ongoing maintenance.
The repository had zero commits and zero active maintainers during the last three months. That is a concrete sign of slowed maintenance and raises the risk that defects or compatibility changes will remain unaddressed.
There were no new or closed issues in the last month, while four pull requests remain open. The unresolved pull requests provide some evidence of pending work but also suggest limited completion activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^11.0||^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.