Clear documentation, tests, licensing, and security processes support adoption. Two contributors are active, but most commits come from one person and workflow dependencies are unpinned.
68%
Total Score
63
94
67
The package runs post-install and post-update Composer scripts, adding install-time execution that requires extra trust in the release contents.
The package and repository are owned by the same individual account, so there is no shown organizational backing to offset the concentrated contributor base.
Two contributors were active in the last three months, but one produced about 84% of commits, leaving maintenance substantially concentrated.
The repository has 13 open issues, no issues closed in the last month, and no merged pull requests in that period, which suggests limited issue-resolution evidence despite some pull-request activity.
The assessed release is a prerelease and the latest version is not a stable major release, so its API and behavior may still change.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/ai Version ^0.8.1 | — | — |
symfony/yaml Version ^7.0|^8.0 | — | — |
laravel/framework Version ^13.7 | — | — |
inertiajs/inertia-laravel Version ^3.0 | — | — |
spatie/laravel-permission Version ^7.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.