The release is licensed, documented, and backed by an organization with recent commits and security tooling. Its small release history and inactive issue activity leave limited evidence of long-term resilience.
62%
Total Score
75
94
100
Three releases over 268 days, with a median interval of about 86 days, show some release activity but limited history for judging long-term maintenance.
All 5 commits in the last 3 months came from one contributor, leaving maintenance dependent on a single active individual. Organization backing partly reduces handoff risk.
There were no new or merged pull requests and no new or closed issues in the last month. This does not prove abandonment, but it provides little evidence of active community maintenance.
All 7 workflows were analyzed successfully and action references are pinned, but tests use a high-confidence unpinned container image. Four workflows also grant top-level write access; without an untrusted checkout or script-injection sink, this remains a hygiene concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.0 | — | — |
nesbot/carbon Version ^2.17|^3.0 | — | — |
symfony/console Version ^6.0|^7.0|^8.0 | — | — |
symfony/process Version ^6.0|^7.0|^8.0 | — | — |
illuminate/queue Version ^9.21|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.