Its 35 runtime dependencies increase upgrade and compatibility work, while one registry maintainer leaves limited visible capacity. The MIT declaration, stable version, matching repository, and non-archived source provide useful safeguards.
54%
Total Score
50
50
88
75
The package declares 35 runtime dependencies, creating substantial upgrade, compatibility, and transitive supply-chain maintenance overhead.
Only one registry publishing maintainer is listed, leaving limited visible publishing capacity; the repository is user-owned rather than organization-backed.
The repository is owned by the same individual account that publishes the package, with no organization backing shown; this provides clear ownership but limited institutional support.
The package has had no release in over two years despite 22 releases overall, which is a meaningful maintenance concern for a Laravel integration.
The repository recorded no commits and no active maintainers in the last three months, supporting the concern that active maintenance has slowed or stopped.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
saidqb/lib Version ^1.0 | — | — |
mews/captcha Version ^3.3 | — | — |
awcodes/shout Version ^2.0 | — | — |
doctrine/dbal Version ^3.5.1 | — | — |
lara-zeus/sky Version ^3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.