Documentation, repository tests, two active contributors, and organizational backing provide a solid maintenance base. The missing security policy and workflow cache finding leave some transparency and build-hygiene concerns.
68%
Total Score
100
100
83
83
This is the package's first release, published less than one day ago, so there is no release history or demonstrated long-term maintenance cadence.
The repository has no stars, forks, or watchers. This is weak supporting evidence, but it does not outweigh the observed development activity for a newly released package.
Composer build tooling is present, but no repository security-scanning tool was detected, leaving a modest assurance gap.
The repository has no security policy, reducing transparency about vulnerability reporting and response practices.
All 16 analyzed action references are unpinned, which weakens build reproducibility. The audit also found a low-confidence cache-poisoning pattern in the release workflow; because confidence is low, this is primarily hygiene rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
artisanpack-ui/core Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.