The package includes tests and only two runtime dependencies. Its organization-backed repository is not archived, but it has no security policy and little visible adoption.
42%
Total Score
50
100
61
75
No declared license, license file, or repository license file was detected. This leaves developers without clear permission to use or redistribute the package.
The package is about 5 years old but has had no releases in the last 12 months, and its four releases were concentrated within roughly one hour. This indicates prolonged maintenance inactivity.
There were no commits and no active maintainers in the last 3 months, consistent with the long release gap and indicating inactive maintenance.
The repository name does not match the package name, and the README does not show a package mention. This raises uncertainty about whether the linked repository directly belongs to the published package.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little external evidence of ongoing use or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fico7489/laravel-pivot Version 3.0.8 | — | — |
ddzobov/laravel-pivot-softdeletes Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.