The source repository has tests, a changelog, release notes, a security policy, and clear package ownership. Its small audience and limited recent activity reduce confidence in long-term maintenance, while workflow references are not pinned.
68%
Total Score
75
90
100
The package is 952 days old with four releases, only one in the last 12 months, and a median release interval of about 329 days. This indicates a slow maintenance cadence, though the latest release is recent.
The repository recorded zero commits and zero active maintainers in the last 3 months. The recent release shows some activity, but the current short-term maintenance signal is weak.
All 11 analyzed action references are unpinned, reducing build reproducibility and increasing exposure to changed upstream actions. The audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings, which limits this to a hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/vapor-cli Version ^1.40 | — | — |
illuminate/support Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.