Healthy and suitable to depend on. It has a long release history, recent releases, active multi-contributor maintenance, tests, release notes, and strong repository hygiene; the only notable caveat is that its workflows do not declare top-level token permissions.
92%
Total Score
100
100
100
83
All 3 workflows lack top-level token permission declarations. No workflow requests top-level write access, which limits the concern, but explicit least-privilege permissions would improve supply-chain transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^5.3|^6.0|^7.0|^8.0 | — | — |
illuminate/view Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
symfony/console Version ^5.3|^6.0|^7.0|^8.0 | — | — |
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.