It has clear documentation, source tests, a matching license, and release notes for this version. The small maintenance base and workflow warning warrant extra care for long-term use.
68%
Total Score
50
100
100
100
Only one registry account has publishing access. The repository is also owned by an individual, so this concentration is a genuine operational risk rather than normal organization publishing hygiene.
All recent commits came from one contributor, leaving maintenance highly concentrated and creating a meaningful continuity risk for this independently owned project.
Only two commits were made in the last three months by one active maintainer. Recent work exists, but the low volume limits evidence of sustained maintenance capacity.
All five workflows were analyzed and all ten action references are pinned, but the audit found a high-confidence bot-condition issue and one file failed analysis. Three workflows also grant top-level write permissions; without an untrusted checkout or script-injection finding, this is a hygiene concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^4.0|^5.0 | — | — |
illuminate/contracts Version ^11.28|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.