Strong documentation, tests, licensing, and a recent repository push support adoption. The single-release history and broad unpinned workflow references reduce confidence in long-term maintenance and build hygiene.
68%
Total Score
75
93
100
This is the package's only release, published about eight months ago, so there is little release history to demonstrate sustained maintenance. The repository was pushed recently, which provides some compensating evidence but not a track record.
The repository recorded no commits and no active maintainers in the last three months. A recent repository push and one merged pull request provide limited compensation, but ongoing development activity is not demonstrated.
All 19 analyzed action references are unpinned, and a high-confidence bot-condition finding reports that actor context may be spoofable in the Dependabot auto-merge workflow. Two workflows also grant top-level write permissions, increasing build and release hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
accelade/forms Version ^1.0.0 | — | — |
illuminate/view Version ^11.0|^12.0 | — | — |
accelade/schemas Version ^1.0.0 | — | — |
accelade/accelade Version ^1.0.0 | — | — |
illuminate/support Version ^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.