Clear licensing, a substantial README, and repository tests improve transparency. The project is not archived and has shipped recently, but maintenance has paused and workflow controls need attention.
64%
Total Score
50
100
100
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance and abandonment concern.
There were no new or closed issues or merged pull requests in the last month, while five pull requests remain open, indicating limited recent project activity.
All five workflows were analyzed, but all 12 action references are unpinned and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. Top-level write permissions in three workflows add hygiene risk, although no untrusted checkout or script injection was found.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spatie/laravel-data Version ^4.7 | — | — |
illuminate/contracts Version ^10.0||^11.0||^12.0||^13.0 | — | — |
phpstan/phpdoc-parser Version ^2.0 | — | — |
phpdocumentor/type-resolver Version ^1.5 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.