Catch dangerous Laravel migrations before they take production down.
58%
Total Score
50
100
88
67
The repository is owned by an individual user rather than an organization, so there is no visible organizational maintenance buffer. This makes the small contributor base more consequential.
This is a very new package, first released 44 days ago, with only one release and no established release cadence. That leaves limited evidence of sustained maintenance.
Two contributors are active, and the leading contributor accounts for two-thirds of recent commits. The second contributor provides some handoff capacity, but ownership remains concentrated in a small project.
The repository had three commits in the last three months from two active maintainers. Activity is present but still light for a package with only one release.
Composer build tooling is present, but no security scanning tool was detected. For a new package, that is a modest process gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nikic/php-parser Version ^5.0 | — | — |
illuminate/console Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/database Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.