Usable with caveats: the package is clearly documented, tested, licensed, and backed by a matching repository, but it has only one active contributor and limited recent activity. Treat it as a small, young project with meaningful maintenance continuity risk.
72%
Total Score
50
100
83
88
The registry namespace and repository owner are the same individual account rather than an organization. This matches the single-contributor activity and does not provide organizational handoff capacity.
The package has three releases over about four months, with a typical interval of about two weeks, but the latest release was about three months ago. This is reasonable for a young package, though it does not yet demonstrate long-term continuity.
All three recent commits came from one contributor, leaving maintenance dependent on a single person and increasing continuity risk.
Only three commits were made in the last three months, which is modest activity for a young package. Recent work exists, but the cadence is not strong evidence of sustained maintenance.
The repository has zero stars, forks, and watchers, so there is no community adoption evidence to offset the small maintainer base. This is a supporting concern rather than evidence that the package is unusable.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^3.0 | — | — |
webrek/laravel-mongo-permission Version ^1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.