The repository has tests, a changelog, release notes, security policy, and dependency scanning. Its small two-person contributor base and a high-confidence workflow template-injection finding warrant routine caution, but the project is actively maintained.
82%
Total Score
100
50
100
75
The release declares 11 runtime dependencies and 11 development dependencies, a substantial but understandable profile for a Laravel and Filament starter application; it adds upgrade surface without indicating instability on its own.
Several install and update lifecycle scripts are present, which increases installation complexity and deserves awareness, but this signal alone does not show a maintenance or abandonment problem.
All four workflows were analyzed, all 10 action references are pinned, and no untrusted checkout or script-injection path was found. A high-confidence template-injection finding and one workflow with top-level write permissions are hygiene concerns, but no untrusted trigger reaches them, so they are not severe on their own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/tinker Version ^3.0.0 | — | — |
livewire/blaze Version ^1.0 | — | — |
filament/filament Version ^3.3 | — | — |
laravel/framework Version ^13.0 | — | — |
livewire/livewire Version ^3.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.