The repository includes tests, release notes, dependency tooling, and security scanning. Maintenance has been quiet for three months, while all four workflow actions are unpinned and no security policy is published.
74%
Total Score
50
100
100
75
The registry and repository are owned by the same individual, Fede Isas. This is coherent ownership but provides less organizational continuity than a backed project.
The repository recorded zero commits and zero active maintainers in the last three months. Although a release was published recently, this lack of current development activity raises maintenance risk.
There are only three open issues and two open pull requests, with no new or closed issues or pull requests in the last month. This suggests limited current project activity.
The repository has no published security policy. This is a transparency gap for reporting vulnerabilities, though security scanning is present elsewhere in the project.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all four action references are unpinned, which leaves build behavior exposed to upstream action changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/mail Version ^9.0 || ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/support Version ^9.0 || ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
paragonie/random_compat Version ~2.0 || ~9.99 | — | — |
tijsverkoyen/css-to-inline-styles Version ~2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.