The repository includes tests, a matching README, and a clear MIT license. Its automation leaves all nine action references unpinned and contains a high-confidence bot-check warning alongside write permissions.
55%
Total Score
50
100
86
50
Only one registry maintainer is listed, and the project backing is an individual-owned repository, leaving limited visible succession capacity if that maintainer stops work.
The source is owned by an individual rather than an organization, so the single-maintainer concern is not offset by visible organizational backing.
The package has only one release, and that release is the latest after 327 days of package age, leaving little evidence of an established release cadence.
The repository recorded zero commits and zero active maintainers during the last three months, a concrete sign that development activity has stalled.
No security policy is present. This is a modest transparency gap, although automated security scanning partly compensates for it.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.