The package has a readable README, tests, a small dependency set, and no install-time scripts. Its source matches the package, but security documentation and automated scanning are absent.
68%
Total Score
50
100
81
83
Only one registry account has publish access. This is a continuity concern for a user-owned project because release publishing depends on one account, although actual repository activity is the more relevant maintenance evidence.
The repository is owned by a user account rather than an organization, so there is no organizational handoff signal to offset the concentrated maintainer and contributor base.
Only three releases have appeared across 574 days, with one release in the last 12 months and a median interval of about 275 days; this suggests slow maintenance but not abandonment because version 0.12.2 was released recently.
All two recent commits came from one contributor, so maintenance depends heavily on a single individual with no demonstrated handoff capacity.
The repository recorded two commits in the last three months, showing some recent activity but a relatively slow maintenance pace.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version ^11.0|^12.0|^13.0 | — | — |
livewire/livewire Version ^4.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.