A package of helpers for the Laravel Framework.
43%
Total Score
unhealthy
Risky: no releases for nearly four years and no recent commits point to an effectively abandoned dependency.
The latest registry release was published nearly four years ago, and there were no releases in the last 12 months. Seventeen releases show prior activity but do not offset the current gap.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project whose development has effectively stopped.
Only one registry publisher is listed, leaving little visible publishing redundancy for a project that already shows stalled release and commit activity.
All three action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. A pull_request_target trigger is not risky by itself, but the automation has weaker safeguards than preferred.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^9.44 | — | — |
spatie/laravel-package-tools Version ^1.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.