The repository includes tests, a changelog, a license, and a security policy. Its workflow uses read-only permissions, but both referenced actions are unpinned.
67%
Total Score
75
94
83
This is the package's first release, published 0 days ago, so there is no release history or cadence demonstrating sustained maintenance yet.
The repository has 0 commits and 0 active maintainers in the last 3 months, but it was created and pushed 0 days ago, so this primarily reflects insufficient history rather than demonstrated abandonment.
The workflow audit completed fully with no findings, read-only permissions, and no untrusted checkout or script-injection paths; however, both of its two action references are unpinned, which is a supply-chain hygiene caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^3.0 | — | — |
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/cache Version ^12.0|^13.0 | — | — |
illuminate/events Version ^12.0|^13.0 | — | — |
illuminate/console Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.