Clear documentation, tests, release notes, and a security policy support adoption. The project is only 35 days old, has one release and one active contributor, while its workflows use broad permissions and unpinned actions.
68%
Total Score
50
100
94
88
The repository is owned by an individual rather than an organization, so the single-contributor concentration provides no visible organizational handoff capacity.
The package is 35 days old and has only one release, so its maintenance record is not yet established.
One contributor made all three commits in the last three months, leaving maintenance highly concentrated in a single person.
There were three commits in the last three months, showing some activity, but the short history limits evidence of sustained maintenance.
All five workflows were analyzed with no audit findings or untrusted checkout sinks, but all 12 action references are unpinned and three workflows grant top-level write permissions. These are meaningful workflow-hygiene weaknesses without evidence of an active exploit path.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version ^6.0||^7.0||^8.0 | — | — |
illuminate/console Version ^11.0||^12.0||^13.0 | — | — |
illuminate/support Version ^11.0||^12.0||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.