It has clear licensing, useful documentation, repository tests, and a security policy. The workflow audit found a high-confidence unpinned container image, while the release burst and subsequent inactivity leave maintenance uncertain.
58%
Total Score
50
83
75
The package has 21 releases, but all were published within one day and there has been no later release during its 147-day lifetime, suggesting an initial burst without an established cadence.
The repository recorded zero commits and zero active maintainers over the last three months, a meaningful sign of limited ongoing maintenance despite the recent initial publication.
Version 1.1.0 is a stable major release, but 95% of recent releases are marked prerelease, which makes the project's release maturity less clear.
All seven action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in the PHP coding workflow. There are no untrusted checkouts or script-injection findings to compound this risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^7.0 || ^8.0 | — | — |
illuminate/config Version ^13.0 | — | — |
illuminate/console Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/filesystem Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.