The project has a long release history and this version includes release notes, tests, and a substantial README. Workflow actions are unpinned, and no security policy or automated security scanning is provided.
72%
Total Score
75
100
94
75
All two recent commits came from one contributor, leaving maintenance dependent on a single active contributor and increasing continuity risk.
The repository uses Make and Composer, but no security scanning tools were detected, leaving a modest security-process gap.
No repository security policy was found, so the process for reporting and handling vulnerabilities is not documented.
The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all 6 action references are unpinned, weakening build reproducibility and action supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cocur/slugify Version ^4.0 | — | — |
illuminate/support Version 11.*|12.*|13.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.