The source is documented, tested, and licensed, with a focused dependency set. Workflow hygiene is weaker because a high-confidence bot-condition issue is present and all nine actions are unpinned.
55%
Total Score
50
100
93
50
This is the package's only release, published about 1 year and 4 months ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance.
The repository recorded 0 commits and 0 active maintainers in the past 3 months. The package is not archived, but recent maintenance capacity is unproven.
All 4 workflows were analyzed, but the audit found a high-confidence bot-condition issue and all 9 action references are unpinned. The pull_request_target workflow has no untrusted checkout or script-injection findings, limiting the severity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.