The package has clear documentation, a matching source repository, an MIT license, tests in the repository, and a security policy. Its install-time scripts and immature 0.x history warrant extra care as the project develops.
68%
Total Score
100
83
67
The package defines post-autoload-dump, post-install-cmd, and post-update-cmd scripts, so installation and dependency updates can execute package-defined commands and deserve review.
This package is newly published, with only two releases on the same day, so its maintenance record and compatibility track record are not established yet.
Version v0.2.0 is not a stable major release, which signals an immature API and a higher likelihood of breaking changes than a mature 1.x release.
All 21 analyzed action references are unpinned, weakening build reproducibility; two workflows also grant top-level write permissions, though no untrusted checkout, injection, or high-confidence audit findings were reported.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/mcp Version ^1.0 | — | — |
laravel/pulse Version ^1.4 | — | — |
illuminate/support Version ^12.41.1||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.