This release appears usable and reasonably transparent, with an MIT license, a matching public repository, a substantial README, changelog, security policy, active recent commits from three contributors, and no deprecation or archived-repository status. However, it is extremely new, remains below a stable 1.0 release, has no tests in either the artifact or repository, lacks security-scanning tooling, and its GitHub Actions workflow does not declare top-level token permissions. These are meaningful maturity and workflow-hygiene concerns, but the active repository and coherent package structure reduce abandonment risk.
72%
Total Score
80
100
72
90
Only one registry account, Sergey Bruhin, has publishing access. This is a thin publication control base, but repository activity shows three active contributors, which partially compensates for the registry-side concentration.
A substantial README and changelog are present, but tests are absent from both the artifact and repository. For a package handling queued backup and verification workflows, the lack of visible tests is a genuine maintenance and regression-risk gap.
The repository is owned by an individual user rather than an organization. This is not inherently unhealthy, but it means the package has less evident organizational maintenance redundancy.
Five releases were published between September 5 and September 6, 2026, with a package age of 0 days and a median interval of about 21 minutes. This shows rapid activity but provides almost no long-term maintenance history, so maturity remains uncertain.
The repository has zero stars, forks, and watchers. Because the package is newly published, these counters are weak evidence rather than a severe concern, but they provide no external adoption signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/nova Version ^4.0|^5.0 | — | — |
sergeybruhin/laravel-postgres-tools Version ^0.3.1|^0.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.