Documentation and automated tests make integration clearer. The package has no install-time scripts, matches its repository, and uses a declared MIT license.
66%
Total Score
50
100
88
75
The repository is owned by an individual user rather than an organization, so the single-maintainer and single-contributor concentration is not compensated by visible organizational backing.
This is a 38-day-old package with only one release, so there is little evidence of sustained maintenance or release reliability.
All three recent commits came from one contributor, leaving maintenance dependent on a single person with no demonstrated handoff capacity.
Three commits in the last three months show some activity, but the small total provides only limited evidence of ongoing maintenance.
Composer build tooling is present, but no security scanning tooling is reported. This is a modest transparency and maintenance gap rather than a severe risk by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
livewire/flux Version ^2.13.1 | — | — |
livewire/livewire Version ^4.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.