this is a laravel package to handle SISP payment
68%
Total Score
caution
Usable with caveats: all recent commits come from one contributor and a workflow audit found a high-confidence bot-condition issue.
The artifact contains license files, but the manifest declares MIT while detection recognizes both Apache-2.0 and MIT; the licensing is visible but the mismatch warrants checking which terms apply.
One contributor made 100% of the 97 commits in the last three months. Organization ownership provides some handoff capacity, but no second active contributor is shown.
The repository recorded 97 commits in three months, but all were made by one active maintainer, leaving limited observed maintenance redundancy.
All three workflows were analyzed successfully and all six action references are pinned, but a high-confidence bot-conditions finding indicates actor context may be spoofable; two workflows also grant top-level write permissions.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^13.0 | — | — |
stevebauman/location Version ^7.6 | — | — |
akira/laravel-pdf-invoices Version ^1.8 | — | — |
pinkary-project/type-guard Version ^0.1.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.