Tests, usage documentation, and a matching repository make adoption easier. The organization-backed project is not archived, but recent commit activity is absent and its workflows use unpinned actions.
66%
Total Score
75
94
100
The package is mature, with releases since 2018, but only one release in the last 12 months and roughly six-month gaps between releases suggest a slow maintenance pace.
The repository recorded zero commits and zero active maintainers during the last three months, which is a meaningful maintenance warning despite the recent release.
All nine analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in a workflow with pull-request automation. No untrusted checkout or script-injection sink was found, so this is a hygiene concern rather than a severe workflow risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hashids/hashids Version ^4.0 | — | — |
illuminate/support Version ^9.0 | ^10.0 | ^11.0 | ^12.0 | ^13.0 | — | — |
cleaniquecoders/laravel-helper Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.