The MIT license, substantial README, release notes, and dependency profile support straightforward adoption. Repository maintenance is currently light and concentrated, while workflow references are entirely unpinned and include a high-confidence bot-condition finding.
74%
Total Score
50
100
100
50
The repository is owned by the same individual who owns the registry package, so ownership is consistent, but there is no organization backing to broaden maintenance capacity.
All recent commits came from one contributor, giving the project a narrow current maintenance base; the repository is user-owned rather than organization-backed.
Only 1 commit was recorded in the last 3 months, showing limited recent development activity despite the recent release history.
The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.
All 7 analyzed action references are unpinned, and one workflow has top-level write permissions; the audit also found a high-confidence bot-condition issue, though no untrusted checkout or script injection was detected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^4.0|^5.0 | — | — |
illuminate/support Version ^11.28|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.28|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.