It has a clear README, repository tests, a license, and a small dependency surface. The missing security policy and unpinned CI actions add hygiene risk.
63%
Total Score
50
100
88
50
The package is young at 166 days old and has only two releases, with a median interval of about 45 days. This provides limited evidence of long-term maintenance maturity.
There were zero commits and zero active maintainers in the last three months. With the last push in May 2026, this is a meaningful sign that maintenance has slowed for a young package.
Composer build tooling is present, but no security scanning tools were detected. For a package whose purpose is security scanning, that is a notable transparency and quality gap.
The repository has no security policy. For a security-focused Laravel scanner, the absence of a documented vulnerability-reporting process reduces transparency.
The single workflow was fully analyzed and has no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, leaving the CI build exposed to changing action revisions.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.