This is a usable, licensed, non-deprecated package with a clear matching repository, organization backing, a stable release line, and no install-time scripts or dangerous workflow patterns. However, maintenance appears modest: the package has made only one release in the last 12 months, recorded no commits or active maintainers in the last 3 months, has very little repository adoption, and lacks tests, a changelog, and a security policy. It is suitable for adoption with normal dependency review, but developers should be prepared to verify compatibility and maintain a fallback because ongoing maintenance capacity is not strongly demonstrated.
68%
Total Score
63
100
78
90
One registry maintainer account is present, but the organization-backed repository provides some compensating ownership context. Registry access still does not demonstrate a broad active maintainer base.
A substantial README is present and the repository uses GitHub Releases, which partly compensates for the absence of packaged tests and a changelog. The lack of tests still leaves implementation regressions harder to detect.
The package has existed for 2316 days with 15 releases, but only one release occurred in the last 12 months; this indicates maturity with relatively slow recent delivery.
The repository recorded zero commits and zero active maintainers in the last 3 months, which is a meaningful sign of limited recent maintenance despite the recent release metadata.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is orderly but provides little evidence of an active user or maintainer community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^5.8|^6.0|^7.0|^8.0|^9.0|^10|^11|^12|^13 | — | — |
webpatser/laravel-uuid Version ^3.0|^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.