Documentation, tests, and a matching repository make integration and review straightforward. Maintenance is concentrated in one contributor, while the workflow uses unpinned actions and the project lacks a security policy.
72%
Total Score
75
94
50
post-install-cmd and post-update-cmd scripts run during dependency operations, adding execution surface beyond ordinary package loading.
All 10 recent commits came from one contributor, so maintenance and response capacity are concentrated in a single person.
The repository has zero stars, forks, and watchers. This is supporting evidence of a small project, but does not outweigh its recent release and commit activity.
No repository security policy was found, leaving disclosure and response expectations undocumented.
The single workflow was fully analyzed, uses read-only permissions, and has no detected audit findings, but both referenced actions are unpinned, reducing build reproducibility and protection against action changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
3neti/form-flow Version ^1.8 | — | — |
3neti/hyperverge Version ^1.1 || ^2.0@beta | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
spatie/laravel-data Version ^4.0 | — | — |
lorisleiva/laravel-actions Version ^2.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.