This release appears usable and reasonably transparent, with an MIT license, a matching repository, source tests, CI workflows, a clear README, no install-time lifecycle scripts, no deprecation, and a stable v1.0.3 release. However, the project is very young at 24 days, has only four releases, all recent repository activity is from one contributor, and the repository has no stars or forks; this leaves meaningful uncertainty about long-term maintenance and bus-factor resilience. The lack of a security policy and explicit workflow token permissions is also a hygiene gap, though no dangerous workflow patterns were detected.
72%
Total Score
50
100
83
80
Only one registry account has publish access. Because the repository owner is an individual rather than an organization, this represents a genuine publishing-capacity and continuity concern.
The repository is owned by an individual GitHub user, with no organization backing shown, so there is limited evidence of institutional maintenance capacity.
The package is only 24 days old with four releases, so there is limited evidence of sustained maintenance; the roughly one-hour median release interval also reflects an early, rapidly iterated project rather than maturity.
One contributor made all three recent commits, giving the project a complete single-contributor concentration and increasing continuity risk for an individually owned package.
Three commits occurred in the last three months, showing some activity, but the small volume and short observation window provide limited evidence of sustained maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
spatie/laravel-package-tools Version ^1.93 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.