It has a clear MIT license, useful documentation, a changelog, and only two runtime dependencies. Maintenance evidence is thin: no active contributors or commits in the last three months, and the repository lacks security scanning and a security policy.
60%
Total Score
50
100
88
75
The package is about 543 days old with 15 releases, but only two releases appeared in the last 12 months. That indicates a slower release cadence, though it is not abandonment by itself.
There were zero commits and zero active maintainers in the last three months. This is meaningful maintenance evidence against the package and raises the risk of slower fixes.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning lowers repository hygiene somewhat, without proving a maintenance failure.
The repository has no security policy. For a library integrated into administrative applications, this weakens the process for reporting and handling vulnerabilities.
The single workflow was fully analyzed with no injection or high-severity findings, but its one action use is unpinned. The workflow has no top-level permissions block, which is acceptable on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
backpack/crud Version ^6.0 | — | — |
venturecraft/revisionable Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.