Clear licensing, a useful README, and repository tests make the package easier to evaluate. The lack of security scanning and an unpinned container image add maintenance and build-integrity concerns.
42%
Total Score
0
86
75
The package has had no release in about 5 years and 6 months, despite 32 releases since March 2021. This strongly suggests the release line is abandoned, with no newer registry maintenance to offset the gap.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing no activity for about 5 years and 6 months. This is a substantial abandonment concern.
The repository has no security policy and no security-scanning tools. For a package that handles application backups, this leaves disclosure and security-maintenance processes unclear.
Both workflows were analyzed completely and avoid untrusted triggers and script injection, but all four action references are unpinned and the audit found a high-confidence unpinned container image. That weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/nova Version ^3.0 | — | — |
nesbot/carbon Version ^2.31 | — | — |
illuminate/support Version ^7.0|^8.0 | — | — |
spatie/laravel-backup Version ^6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.