The repository includes tests, a clear license, and five recent commits. The project is new, has one maintainer, and all four workflow actions are unpinned, leaving maintenance and build-reproducibility concerns.
68%
Total Score
50
100
88
75
One registry publishing account is consistent with the matching user-owned repository, but it leaves little publishing redundancy.
The repository is owned by a user account rather than an organization, so the single-maintainer and single-contributor concentration is not compensated by visible organizational backing.
This is a new package released once 78 days ago, so there is too little release history to demonstrate long-term maintenance stability.
All five recent commits came from one contributor, creating a single-person maintenance dependency without organizational backing.
Five commits from one active maintainer in the last three months show some ongoing work, but not yet a broad or sustained maintenance record.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.