The repository includes a substantial README, tests, changelog, MIT licensing, and a security policy. Its automation has broad token permissions, all nine actions are unpinned, and the high-confidence bot-condition finding adds maintenance risk.
43%
Total Score
50
92
100
Only two releases were published, both around 723 days ago, with no releases in the last 12 months. That unusually short release history and prolonged silence raise abandonment risk, despite the stable version.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the lack of recent releases. The repository is not archived, but there is no observed recent maintenance to compensate.
All 9 of 9 action references are unpinned, and three of four workflows grant top-level write permissions. A high-confidence bot-conditions finding is present in a pull_request_target workflow; without an untrusted checkout or script-injection sink, this is a meaningful hygiene concern rather than a severe standalone risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jenssegers/agent Version ^2.6 | — | — |
filament/filament Version ^3.0 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.