The repository matches the package and has a straightforward 22-file implementation with no install-time scripts. The empty README, absent security policy, and lack of security scanning leave consumers with limited guidance and assurance; pin this version only if its license is clarified.
46%
Total Score
0
69
88
The package has 28 releases but only one release in the last 12 months, with the latest published on October 10, 2025; this indicates a substantial slowdown after early activity.
The repository recorded zero commits and zero active maintainers in the last three months, providing no recent evidence of ongoing maintenance.
The manifest declares MIT, but the artifact license file was detected as GPL-3.0. Although license files are present in both the package and repository, the mismatch needs clarification before adoption.
A README file is present, but it contains no text, and the repository has no tests or changelog. Missing tests and changelog are normal for published artifacts, but an empty README weakens consumer guidance for this library.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. This is a modest transparency and assurance gap rather than evidence of unsafe behavior.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/pint Version ^1.24 | — | — |
illuminate/support Version ^12.16 | — | — |
spatie/laravel-data Version ^4.15 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.