It is a small, narrowly scoped Laravel localization package with a clean MIT license and no install scripts. Organization backing helps, but the single publisher and zero recent project activity reduce confidence.
57%
Total Score
67
100
72
75
Only one registry account has publish access, which creates a limited publishing path; the organization-backed repository provides some compensation.
The published artifact has no README, tests, or changelog. The tiny, narrowly scoped file set makes missing tests and changelog less concerning, but the missing README still reduces consumer guidance.
The package has existed since 2017 with 16 releases, but it had no releases in the last 12 months and was last released about 18 months ago, indicating slowed maintenance.
The repository had zero commits and zero active maintainers in the last three months, consistent with the package's roughly 18-month release gap and increasing abandonment risk.
The repository name does not exactly match the package name, and no README mention was collected. This creates some uncertainty about package ownership, although a subpackage or naming convention could explain the mismatch.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version >=7.0 | — | — |
symfony/translation Version ^4.0 | ^5.0 | ^6.0 | ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.