It has a clear MIT license, a readable package, and release notes for this version. The automated workflows have an unsafe bot check and all 10 action references are unpinned.
12%
Total Score
50
100
63
83
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on it.
The package has had no release in nearly three years: its latest release was December 12, 2023, despite being assessed in September 2026. This indicates severe release abandonment.
The repository recorded zero commits and zero active maintainers over the last three months. This confirms that ongoing maintenance has stopped.
The linked source repository is archived, and its last push was in July 2024. An archived repository is a severe maintenance and abandonment risk for a dependency.
One individual has registry publish access. That is a limited publishing base, and it is more concerning here because the package is also archived and inactive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^3.0 | — | — |
illuminate/contracts Version ^10.0 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.