Clear documentation, tests, licensing, and release notes support maintenance confidence. Workflow image pinning is weak, and the repository shows no recent commit activity, so future compatibility may depend heavily on the single maintainer.
64%
Total Score
50
100
94
100
One registry maintainer is consistent with an individually owned repository, but it leaves little demonstrated publishing redundancy.
The repository is owned by an individual rather than an organization, so the small maintainer base provides limited visible continuity capacity.
The package has seven releases since October 2021, but none in nearly two years; that slowdown raises compatibility and abandonment concerns despite a previously regular release interval.
There were no commits and no active maintainers in the last nine months, which is a meaningful maintenance warning even though the repository is not archived.
There are only two open issues and two open pull requests, with no new or closed activity in the last month; this suggests limited current project interaction.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.0|^10.0|^11.0 | — | — |
illuminate/database Version ^9.0|^10.0|^11.0 | — | — |
illuminate/contracts Version ^9.0|^10.0|^11.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.