Documentation, tests, and release notes make integration straightforward. Organization backing provides some continuity, though security scanning is absent.
70%
Total Score
83
100
94
50
All two recent commits came from one contributor. Organization backing provides some handoff capacity, but recent development remains concentrated.
The repository uses Composer build tooling, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
No repository security policy was found, reducing the project's documented path for reporting vulnerabilities.
Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or excessive permissions. However, all 7 referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/vapor-cli Version ^1.60 | — | — |
spatie/laravel-dashboard Version ^3.0 | — | — |
fidum/laravel-dashboard-chart-tile Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.