A complete README, repository tests, MIT licensing, and a security policy support adoption. The workflow audit found a high-confidence unpinned container image, so releases should be checked carefully before upgrading.
62%
Total Score
50
100
90
75
The package has 11 releases over about 5 years, but none in the last 12 months; this indicates that maintenance has slowed despite a previously regular cadence of about 94 days.
The repository recorded 0 commits and 0 active maintainers during the last 3 months, which is direct evidence of currently inactive development.
Both workflows were analyzed completely and had no untrusted triggers or script injection, but a high-confidence audit found an unpinned container image and all 4 action references were unpinned.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^9.0|^10.0|^11.0|^12.0 | — | — |
spatie/laravel-package-tools Version ^1.11.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.