A Laravel + Livewire task board where you queue work for your coding agent and follow it live: states, questions, progress and results, in your own app and database.
62%
Total Score
63
100
88
100
All 17 analyzed action references are unpinned, and two workflows grant top-level write permissions. The release workflow also contains two high-confidence template-injection findings; although no untrusted checkout or dangerous trigger was observed, this remains a significant workflow-hygiene concern.
The registry namespace and repository are owned by the same individual account, so there is no observed organizational handoff capacity to offset the concentrated contribution pattern.
The package is only 31 days old but has 233 releases, indicating active work while also suggesting an unusually rapid and immature release cadence.
Recent activity is highly concentrated: one contributor made 86 of 87 commits, leaving little demonstrated redundancy despite a second active contributor.
Three issues and three pull requests were opened in the last month, but none of the issues or pull requests were closed or merged during that period, suggesting some unresolved maintenance pressure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/auth Version ^12.0|^13.0 | — | — |
illuminate/http Version ^12.0|^13.0 | — | — |
league/commonmark Version ^2.4 | — | — |
livewire/livewire Version ^4.4 | — | — |
illuminate/console Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.