The package is licensed, documented, and supported by repository tests and release notes. Maintenance has gone quiet, and its workflows use unpinned actions with broad write permissions.
57%
Total Score
50
100
94
Only two releases arrived within minutes of each other, followed by more than a year without a release. That makes ongoing maintenance and compatibility less certain.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increased abandonment risk.
All 6 analyzed action references are unpinned, and 2 workflows grant top-level write permissions. The high-confidence bot-conditions finding is a workflow hygiene concern, although no untrusted checkout or script injection was found.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/pulse Version ^1.4 | — | — |
illuminate/contracts Version ^12.3 | — | — |
spatie/laravel-package-tools Version ^1.92.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.