This is a usable and reasonably transparent package with a stable major release, 850 days of history, five releases in the last 12 months, an MIT license, tests, a matching source repository, and no deprecation or risky workflow findings. The main concerns are that recent repository activity is very light and entirely concentrated in one contributor, while the repository lacks a security policy and its workflows do not declare top-level token permissions. Low popularity is only supporting context rather than a decisive problem, but the thin maintenance base means dependents should monitor the project and be prepared for limited maintainer capacity.
72%
Total Score
60
100
89
80
Only one registry account has publish access. This is a genuine continuity concern for a user-owned project, although repository activity shows the same owner is currently maintaining it.
The repository is owned by an individual user rather than an organization, so the one-person maintenance and bus-factor concerns are not compensated by visible organizational backing.
All recent commits come from one contributor with a 100% share, leaving the project exposed to a single-maintainer interruption.
Only one commit was recorded in the last 3 months, by one active maintainer. The recent activity has not stopped, but its low volume suggests limited maintenance capacity.
The repository has only 2 stars, 1 fork, and 1 watcher. This indicates limited adoption evidence, but popularity is supporting context and does not by itself make a small, maintained package unsafe to depend on.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^5.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
rogervila/array-diff-multidimensional Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.