Usable with caveats: the package is clearly licensed, documented, tested in its repository, and not deprecated or archived. However, it has had no registry release in about 18 months and no commits in the last three months, so verify that it still fits your Laravel version before adopting it.
64%
Total Score
50
100
89
80
The package uses a post-autoload-dump install-time script. This is an additional installation behavior that deserves review, but the signal does not establish that it is harmful.
The registry namespace and repository are owned by the same individual, which is consistent with an independently maintained package but provides a thinner backing structure than an organization-owned project.
Only two releases exist, and there have been no releases in the last 12 months; the latest release is about 18 months old. This lowers confidence that compatibility issues will be addressed promptly.
There were zero commits and zero active maintainers in the last three months. Combined with no registry release in the last year, this is the strongest evidence of slowed maintenance.
There are four open pull requests but no issues or pull requests opened or merged in the last month. This suggests limited recent collaboration and leaves maintenance momentum uncertain.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/cache Version ^10.0||^11.0||^12.0 | — | — |
illuminate/session Version ^10.0||^11.0||^12.0 | — | — |
illuminate/support Version ^10.0||^11.0||^12.0 | — | — |
illuminate/contracts Version ^10.0||^11.0||^12.0 | — | — |
google/cloud-firestore Version ^1.43.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.