The package is clearly documented, licensed, and matched to its source repository. A second active contributor, repository tests, and Dependabot provide useful support for continued maintenance.
84%
Total Score
75
100
94
75
The package is only 96 days old and has two releases, both published about one day apart. Recent activity is encouraging, but this short history provides limited evidence of long-term maintenance.
Two contributors are active, but the primary maintainer made about 73% of recent commits. The second contributor provides some resilience, while ownership remains concentrated.
All four workflows were analyzed successfully, all 11 action references are pinned, and no audit findings or untrusted checkout paths were detected. One workflow has top-level write permissions, a mild hygiene concern without an untrusted trigger or sink.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.