This is a usable but very new package with organizational backing and a repository that clearly matches the package. It is not deprecated or archived, has a stable v1.0.2 release, uses no install-time scripts, and has a small, understandable dependency profile. However, it was first released only hours ago, has no observed commit activity or contributor activity in the measured period, has no tests, changelog, security policy, or security scanning, and declares a proprietary license without a license file. The README explains that this repository is an automatically generated monorepo split, which makes the missing direct development activity and tests less concerning than they would be for a standalone project, but the package still has limited demonstrated maturity and transparency.
62%
Total Score
67
100
72
88
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
quansitech/cmf-core Version ^1.0 | — | — |
spatie/laravel-permission Version ^8.0 | — | — |
bezhansalleh/filament-shield Version ^4.0 | — | — |
quansitech/cmf-module-auditing Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.