Pirsch for Laravel: inject the tracking script in your Blade layouts, with the settings stored in the database via spatie/laravel-settings.
65%
Total Score
caution
A brand-new package has limited operating history, with a high-confidence workflow condition finding adding supply-chain caution.
The package is maintained under a personal GitHub account rather than an organization, so continuity depends on one individual; the repository and registry namespace do match.
The package is only 0 days old with 2 releases and a median interval of about 18 hours, so maintenance and compatibility history are not yet established.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, but this is consistent with a package released only hours ago and is not yet evidence of abandonment.
All 5 workflows were analyzed, all 12 action references are pinned, and no untrusted checkout or script injection was found. However, a high-confidence bot-conditions finding in the Dependabot auto-merge workflow is a workflow-hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^12.61.1|^13.12.0 | — | — |
spatie/laravel-settings Version ^3.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.