Google Analytics 4 metrics for Laravel: visitors, sessions, pageviews, bounce rate, session duration, top pages, sources, countries, browsers, devices and realtime users via the GA4 Data API, authenticated with a service account.
68%
Total Score
caution
A first release with no maintenance track record keeps this otherwise well-documented package in the caution range.
This is the first release, published today, so there is no demonstrated release cadence or long-term maintenance record yet. That is a maturity gap rather than evidence of abandonment.
All five workflows were analyzed and all 11 action references are pinned, with no untrusted checkout or script-injection findings. However, the audit reports a high-confidence bot-conditions finding in dependabot-auto-merge.yml and three workflows with top-level write permissions, creating a real workflow-hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
spatie/laravel-settings Version ^3.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.