Documentation and project structure are solid, with tests in the repository, a license, and Dependabot. Maintenance has been inactive since October 2024, while every workflow action is unpinned and an automated merge check has a high-confidence condition warning.
55%
Total Score
50
90
100
The package has only two releases, both on October 1, 2024, and none in the last 12 months. That limited history and long pause reduce confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release pause and raising abandonment risk.
The audit analyzed all five workflows without failures, but all 12 action references are unpinned and it found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. These are workflow hygiene concerns, not evidence that the package itself is unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/forms Version ^3.0 | — | — |
illuminate/contracts Version ^11.0 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.