A clear README, repository tests, and a matching license make integration and ownership straightforward. Composer-only installation avoids package-time execution, while some workflow permissions are broader than necessary.
82%
Total Score
83
100
94
83
The package is newly published, with three releases on the same day and no longer-term release history. That limits evidence of sustained maintenance, but the repository shows current activity.
Two contributors were active recently, with the leading contributor responsible for about two-thirds of commits. The concentration is noticeable but not severe for this small project.
All 4 workflows were analyzed with no audit findings, no untrusted checkouts, no script injection, and all 10 action references pinned. Two workflows grant top-level write permissions, a mild least-privilege concern without an untrusted trigger.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^5.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
jeffersongoncalves/laravel-socialite Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.