A single maintainer and no commits in the last three months limit confidence in ongoing support. The recent stable release, matching repository, MIT license, and absence of install scripts provide useful reassurance.
72%
Total Score
50
100
83
83
Registry publishing access is held by one account, leaving a thin publishing base and increasing continuity risk for a user-backed project.
The registry namespace and repository belong to the same individual account, so the package has direct ownership alignment but no organizational backing.
The package is mature at about 5 years old with 19 releases, but only one release in the last 12 months indicates a slower current cadence.
There were no commits and no active maintainers in the last three months, weakening evidence of ongoing maintenance despite the recent release.
The repository has no stars or forks and one watcher. Popularity is only supporting evidence, but these counts provide little evidence of broad community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/composer Version ^2.0 | — | — |
laravel/framework Version ^6.0|^7.0|^8.0|^9.0|^10.0|^11.0 | — | — |
barryvdh/reflection-docblock Version ^2.0.6 | — | — |
rockyfc/laravel-smart-common Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.