This release appears usable and actively maintained, with 20 releases over roughly 21 months, 8 releases in the last 12 months, a recent repository push, a matching and package-referencing source repository, tests, an MIT license, and no install-time lifecycle scripts. The main concerns are concentrated ownership and maintenance: all four commits in the last three months came from one contributor, the repository has no security scanning or security policy, and the project has no observable popularity or issue activity. Version 0.9.1 also indicates the package has not reached a stable major release, though it is not marked as a prerelease. Overall, it is a reasonable dependency with some bus-factor and security-process risk.
72%
Total Score
50
50
83
75
Six runtime dependencies, including Laravel, Orchid, and image-processing components, create ordinary compatibility and transitive-maintenance considerations for a framework integration package, but the profile is not unusually large.
The repository is owned by a personal user account rather than an organization, so the single-maintainer concentration is not compensated by visible organizational backing.
One contributor made all four commits in the last three months, giving the project a complete short-term contributor concentration and increasing continuity risk.
The repository recorded four commits in the last three months, showing recent activity, but the volume is modest for an actively evolving dependency.
There are no open issues or pull requests and no recent issue or pull-request activity; this is not inherently unhealthy, but it offers little evidence of an engaged user or maintainer community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
orchid/platform Version ^14.0 | — | — |
laravel/framework Version 11.0 || ^12.0 | — | — |
intervention/image Version ^3.0 | — | — |
jaybizzle/crawler-detect Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.