This release appears usable but warrants caution before adopting: it is MIT-licensed, not deprecated or archived, has tests in both the artifact and repository, and is backed by an organization-owned repository whose name matches the package. However, maintenance activity is currently weak, with no commits or active maintainers in the last 3 months, only five releases across roughly 886 days, and a pre-1.0 version. The absence of repository security scanning and a security policy reduces transparency, although there are no lifecycle scripts or dangerous workflows. Overall, this looks like a small, plausibly maintained package with meaningful abandonment and maturity risk rather than an obviously unfit dependency.
62%
Total Score
63
50
78
90
The repository recorded zero commits and zero active maintainers in the last three months. This is the strongest concern in the available evidence because it suggests recently collapsed maintenance activity, despite the recent repository push associated with the release.
Seven runtime dependencies, including Laravel components, a tree library, media library, and translations package, create a meaningful transitive maintenance surface for a small package, though the profile is understandable for its stated framework domain.
The package has existed for about 886 days and published three releases in the last 12 months, but only five releases overall with a median interval of about 260 days indicates a modest release cadence.
There are no open issues or pull requests and no issue or pull-request activity in the last month. The clean queue is positive, but the lack of activity provides little evidence of an engaged maintainer or user community.
The repository has zero stars and forks and only one watcher, indicating little visible community adoption or external redundancy. Popularity is supporting evidence rather than decisive proof, but this increases the risk of limited review and support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
efureev/laravel-trees Version ^5.0 | — | — |
spatie/laravel-medialibrary Version ^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.