The repository has tests, a changelog, a clear README, and a matching source project. Registry releases stopped in May 2022, recent commit activity is absent, and all six workflow actions are unpinned; verify compatibility before adopting.
63%
Total Score
50
92
83
The package has had no registry release in more than four years, with zero releases in the last 12 months. This is a meaningful maintenance concern for a testing utility tied to evolving Laravel and Octane versions.
The repository recorded zero commits and zero active maintainers in the last three months. A push in September 2024 shows it was not permanently abandoned, but current maintenance capacity is still unclear.
The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but all six action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/octane Version ^1.0 | — | — |
mockery/mockery Version ^1.0 | — | — |
phpunit/phpunit Version >=9.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.