The package has a clear README, repository tests, release notes, and a security policy. Its five workflows were fully audited, but all 10 actions are unpinned and two high-confidence workflow findings reduce automation hygiene.
67%
Total Score
75
100
100
100
No commits or active maintainers were recorded in the last three months. Recent releases partly offset this, but the lack of current commit activity is a meaningful maintenance concern.
All five workflows were analyzed successfully, but all 10 action references are unpinned. The audit also found high-confidence bot-condition and unpinned-container-image issues; the pull_request_target workflow had no untrusted checkout or script-injection sink, limiting the severity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^4.0|^5.0 | — | — |
laravel/socialite Version ^5.5 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.