The repository includes tests, release notes for this version, and active organizational ownership. Recent commit activity is absent, while all 10 workflow actions are unpinned and no security policy is published, leaving meaningful maintenance and build-hygiene concerns.
62%
Total Score
50
80
50
There were no commits and no active maintainers in the three months measured, which is a meaningful sign of slowed maintenance despite the recent release.
The package has existed since January 2022 with 17 releases, but only one release in the last 12 months; the March 2026 release shows some recent maintenance without a strong cadence.
The repository has no published security policy, reducing transparency for reporting and handling vulnerabilities; GitGuardian scanning provides only partial compensation.
Version 0.1.6 is not a stable major release, although it is not marked as a prerelease and recent releases contain no prerelease versions.
All four workflows were analyzed without dangerous triggers or audit findings, but all 10 action references are unpinned, weakening build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
escolalms/auth Version ^0 | — | — |
escolalms/core Version ^1 | — | — |
guzzlehttp/guzzle Version ^7 | — | — |
laravel/framework Version >=8.0 | — | — |
escolalms/settings Version ^0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.