This is my package laravel-visitor-tracking
52%
Total Score
caution
No commits in three months, a minimal README, and a high-confidence workflow warning weaken an otherwise licensed, tested package.
A post-autoload-dump lifecycle script runs during installation; this is a mild operational consideration, but the signal alone does not show harmful behavior.
Only one registry maintainer is listed, leaving a thin publishing base. The linked repository is also owned by an individual rather than an organization, so there is no provided backing signal to offset that concentration.
The repository has tests and a changelog, and this exact version has GitHub release notes. The package README is only 17 characters and says “work in progress,” which is a consumer-facing documentation gap.
The repository owner is an individual user, not an organization, so the package has no demonstrated organizational backing to compensate for its single-maintainer structure.
The package has 27 releases over about 13 months, but only 1 release in the last 12 months; the release history suggests activity has slowed sharply.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^12.0 | — | — |
matomo/device-detector Version ^6.4 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.