This release appears healthy and reasonable to depend on: it has a stable major version, 38 releases over about 4 years, seven releases in the last 12 months, a recent repository push, an active organization-owned repository, a substantial README and changelog, repository tests, explicit MIT licensing, and no registry deprecation. The main risks are concentration of recent development in one contributor, modest repository activity and popularity, no published security policy, and incomplete GitHub Actions permission declarations; these warrant operational review but do not outweigh the strong release and maintenance evidence.
82%
Total Score
70
50
100
80
Seven runtime dependencies are a moderate integration surface for a Laravel package; this is a manageable caution rather than a severe concern, though dependency compatibility should still be reviewed.
One contributor made all 4 commits in the last 3 months, creating a concentrated maintenance dependency. Organization ownership provides some handoff capacity, but no second active contributor is evidenced.
There were 4 commits in the last 3 months, showing ongoing work, but all activity came from one active maintainer; the cadence is adequate but thin.
There are 4 open issues and no new issues or closed issues in the last month, while one pull request was merged; this indicates limited recent community activity but not abandonment.
The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented. This is a transparency gap, though it is not by itself evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
saloonphp/saloon Version ^4.0 | — | — |
maatwebsite/excel Version ^4.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
saloonphp/rate-limit-plugin Version ^2.0 | — | — |
spatie/laravel-translatable Version ^5.0|^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.