The package includes tests, a useful README, and automated static analysis. Its small user-owned project has little adoption and no recent commits, while every workflow action is unpinned; pin 1.0.5 only if those trade-offs are acceptable.
58%
Total Score
50
100
89
75
The registry namespace and repository owner match, so the source relationship is coherent. The owner is an individual account rather than an organization, providing limited visible project backing.
Although six releases were published quickly after the first release, the latest release was May 19, 2025 and there were no releases in the following 12 months. That makes ongoing maintenance uncertain.
The repository had zero commits and zero active maintainers during the last three months. Combined with no releases in the last 12 months, this indicates a meaningful risk of stalled maintenance.
There are no new or closed issues in the last month and one open pull request, showing little recent collaboration. This supports the maintenance concern but is less decisive than the commit record.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these figures provide little evidence of community adoption or external review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^8 || ^9 || ^10 || ^11 || ^12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.