The project has strong documentation, tests in the repository, release notes, licensing, and security tooling. Its short history, pre-1.0 status, one-person recent contribution base, and workflow pinning gaps warrant care with upgrades.
66%
Total Score
75
100
86
100
The package is only 99 days old but has 18 releases, with releases arriving roughly every 4 hours; this shows strong activity but limited maturity history.
One contributor made all 14 commits in the last three months, creating a meaningful continuity risk; organization ownership provides some handoff capacity but no second active contributor is shown.
The repository has 29 open issues, with no issues closed in the last month; this suggests unresolved maintenance demand even though a pull request was opened.
Version v0.17.0 is not a stable major release, so breaking changes remain more likely despite the absence of prerelease versions.
All six workflows were analyzed with no audit findings or untrusted checkouts, but all 27 action references are unpinned and three workflows grant top-level write permissions; without an untrusted trigger these are hygiene concerns rather than severe risks.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^7.0|^8.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
spatie/laravel-data Version ^4.23 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.