Tests, a clear license, and release notes make the package easier to evaluate. Its inactive development and unpinned workflow actions warrant pinning version 0.4.2 and accepting maintenance risk.
58%
Total Score
75
92
75
The latest release was 27 September 2022, with no releases in the following 12 months of collected history; the earlier median interval of about 19 days shows this is a prolonged stop, not normal cadence.
The repository recorded no commits and no active maintainers in the last three months, consistent with the package's long release gap and indicating limited current maintenance capacity.
The linked repository has no security policy, which reduces transparency for reporting and handling dependency issues; the tested package and visible source provide some compensating context but not a process.
Both analyzed workflows were complete and had no detected dangerous sinks or audit findings, but all 6 of 6 action references were unpinned, leaving build inputs less reproducible.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
escolalms/auth Version ^0 | — | — |
escolalms/core Version ^1 | — | — |
guzzlehttp/guzzle Version ^7 | — | — |
laravel/framework Version >=8.0 | — | — |
escolalms/settings Version ^0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.