The repository has tests and an appropriate license, while Dependabot provides some maintenance support. Its workflow references are not pinned, and the recent lack of commits or merged pull requests leaves maintenance capacity uncertain.
55%
Total Score
33
94
50
There were zero commits and zero active maintainers in the last three months, materially increasing uncertainty about whether fixes and updates will continue.
The package defines post-install and post-update scripts, including project-creation setup hooks. These are plausible for a Laravel starter kit, but they increase installation behavior that consumers must understand.
The package and repository are owned by the same individual account, so the repository appears correctly linked, but there is no organization backing shown to provide additional maintainer capacity.
All five releases arrived within about 15 minutes on the first release day, with no later release activity across the package's 146-day lifetime; this shows an initial burst but weak ongoing maintenance evidence.
The repository has 24 open pull requests but no new or merged pull requests in the last month, which is a weak sign of unresolved maintenance work.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/tinker Version ^3.0 | — | — |
laravel/fortify Version ^1.34 | — | — |
laravel/framework Version ^13.0 | — | — |
laravel/wayfinder Version ^0.1.14 | — | — |
inertiajs/inertia-laravel Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.