The package is small and clearly documented, with an MIT license and a focused dependency set. Repository tooling, security reporting, and two active contributors provide useful safeguards despite limited popularity.
78%
Total Score
83
100
94
100
The package and repository are both owned by the same individual account, providing clear ownership, though there is no organization backing to broaden maintenance capacity.
The assessed version is a stable major release and is not a prerelease. The reported latest version of 1.1.0 conflicts with the assessed 3.1.0, which reduces confidence in the registry metadata.
All three workflows were analyzed, all nine action references are pinned, and no untrusted checkout or script-injection path was found. A high-confidence template-injection finding in update-changelog.yml remains a workflow hygiene concern, though it lacks the dangerous trigger or sink that would make it severe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jeffersongoncalves/laravel-mixpanel Version ^1.0 | — | — |
jeffersongoncalves/filament-analytics-core Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.