Clear documentation, tests, release notes, and a licensed artifact make the package easy to evaluate. Pin this early release until its contributor base and release history broaden.
67%
Total Score
88
100
86
67
This is the first release, published 0 days ago, with only one release recorded. There is not yet enough history to demonstrate sustained maintenance.
The repository has 8 new issues and 9 new pull requests in the last month, but none were closed or merged in that period. For a newly published project, this shows attention but leaves resolution capacity unproven.
No security policy was found in the repository. This is a transparency gap for reporting vulnerabilities, though it is not evidence that the package is unsafe.
Version 0.0.1 is not a stable major release, so compatibility and API maturity are unproven despite it not being marked as a prerelease.
All 22 analyzed action references are unpinned and one workflow grants top-level write permissions, creating workflow hygiene concerns. The only audit finding is low-confidence cache-poisoning in the release workflow, so it remains hygiene rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^5.0 | — | — |
livewire/livewire Version ^4.4.2 | — | — |
illuminate/support Version ^11.28|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.28|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.