This release appears usable but is very new and has not yet demonstrated sustained maintenance: it was first released today, with three releases over roughly seven hours and no commits or active maintainers observed in the prior three months. The linked repository is organization-owned, matches the package, is not archived, and the README explains that it is an automatically generated monorepo split, which reasonably explains the absence of tests and changelog in this package repository. However, the proprietary license, lack of security scanning and security policy, zero repository popularity, and absence of observed issue or commit activity leave meaningful transparency and continuity concerns. The package is not deprecated and has no install lifecycle scripts or obviously dangerous workflows, so it is not currently unfit to use, but adoption should be limited until the project establishes a longer maintenance record and clarifies licensing.
62%
Total Score
67
100
72
83
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
quansitech/cmf-core Version ^1.0 | — | — |
tapp/filament-auditing Version ^4.0 | — | — |
owen-it/laravel-auditing Version ^14.0 | — | — |
bezhansalleh/filament-shield Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.