Recent commits, release notes, tests, and a clear license support ongoing maintenance. A single contributor, slow release cadence, and weak workflow pinning leave meaningful maintenance and build-hygiene concerns.
68%
Total Score
50
100
94
50
Only one account has registry publish access. This is a meaningful continuity concern for a user-owned project, although repository activity shows that the maintainer is still active.
The repository is owned by an individual user rather than an organization, so the single-maintainer and concentrated-activity concerns are not offset by visible organizational backing.
The package has existed for over three years but has only five releases, with one release in the last 12 months and a median interval of about 325 days. The recent release and active repository activity partly offset the slow cadence.
One contributor made all three commits in the last three months, giving the project a complete single-person bus factor and increasing abandonment risk if that maintainer becomes unavailable.
The repository had three commits in the last three months, all from one active maintainer. This demonstrates recent work but indicates limited maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^9|^10|^11|^12|^13 | — | — |
spatie/laravel-package-tools Version ^1.14 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.