Tests, release notes, and a matching organization-backed repository provide useful maintenance evidence. The package is licensed and has no install-time scripts, but security documentation and workflow pinning are incomplete.
68%
Total Score
75
93
75
The package has 16 releases since March 2022, but only 1 release in the last 12 months, indicating a currently slow release cadence despite its long history.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which weakens evidence of ongoing maintenance; the recent release provides only limited compensation.
No security policy is present in the repository, leaving vulnerability reporting and response expectations undocumented.
All 7 analyzed GitHub Actions references are unpinned, creating avoidable build-integrity risk. The audit analyzed all 3 workflows and found no untrusted checkouts, script injection, or high-severity findings.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
escolalms/core Version ^1 | — | — |
google/apiclient Version ^2.0 | — | — |
laravel/framework Version >=8.0 | — | — |
escolalms/settings Version ^0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.