The repository includes tests, a README, and a matching MIT license. Its single maintainer and workflow hygiene add ongoing maintenance and build-integrity concerns.
58%
Total Score
50
100
94
75
Only one registry account has publish access, which leaves limited publishing redundancy. The repository is user-owned rather than organization-backed, so no compensating organizational context is shown.
The repository owner is an individual account rather than an organization, and no broader project backing is shown. This leaves less visible continuity if the maintainer stops publishing.
The package has 13 releases since July 2020, but none in the last 12 months and the latest release was in December 2023. This indicates materially slowed maintenance for a dependency receiving no recent updates.
There were zero commits and zero active maintainers in the last three months. Combined with no registry releases in the last 12 months, this is concrete evidence of stalled maintenance.
There are no open issues and three open pull requests, but no issues or pull requests were created or merged in the last month. This is consistent with low current activity, though it is weaker evidence than the zero recent commits.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
laravel/framework Version ^8.40.0 || ^9.0.0 || ^10.0.0 | — | — |
bensampo/laravel-enum Version >=3.0 <=6.0 | — | — |
spatie/data-transfer-object Version ^3.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.