MIT licensing, clear installation guidance, repository tests, and no install-time scripts support adoption. The small user base and absent security policy leave less independent assurance, while workflow pinning needs improvement.
76%
Total Score
75
100
94
75
There were no commits and no active maintainers in the three months measured. This is a maintenance caution, although the recent release and repository push provide compensating evidence.
Composer build tooling is present, but no security scanning tools were detected, leaving less automated security assurance.
The repository has no security policy, so there is no documented vulnerability-reporting process for consumers or contributors.
Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, which weakens reproducibility and action supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/cache Version ^6.18.13 || ^7.10 || ^8.0 || ^9.0 || ^10.0 || ^11.0 | — | — |
illuminate/support Version ^6.18.13 || ^7.10 || ^8.0 || ^9.0 || ^10.0 || ^11.0 | — | — |
async-aws/dynamo-db Version ^1.1 || ^2.0 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.