A simple way to interact with the Miro API in Laravel
62%
Total Score
caution
Usable with caveats: no commits in three months and high-confidence workflow hygiene issues weaken an otherwise transparent project.
No commits and no active maintainers were recorded over the last three months. The recent repository push is encouraging but does not compensate for the measured lack of sustained commit activity.
v0.4.0 is not a stable major release, so its API may still change; it is not marked as a prerelease, which partly offsets that concern.
All 11 workflows were analyzed, but every one of 25 action references is unpinned; the audit also found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these remain workflow hygiene concerns rather than a severe standalone risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
saloonphp/saloon Version ^3.0|^4.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
saloonphp/cache-plugin Version ^3.1 | — | — |
saloonphp/laravel-plugin Version ^3.0|^4.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.