Two contributors made recent commits and the latest release includes Laravel 13 compatibility. The project has tests and release notes, though its slow release cadence and unpinned workflow actions reduce transparency and build reproducibility.
82%
Total Score
100
100
88
75
The package is mature at over 11 years old, but only one release landed in the last 12 months and the median interval is about 175 days, indicating slow maintenance rather than abandonment.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and monitoring gap.
The repository has no security policy, which makes vulnerability reporting and response expectations less clear.
The sole workflow was fully analyzed with no dangerous audit findings or untrusted checkouts, but both action references are unpinned, weakening build reproducibility. No top-level permissions block is acceptable here because the workflow has no untrusted trigger or write scope.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9|^10|^11|^12|^13.0 | — | — |
symfony/http-kernel Version ^6|^7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.