The project includes tests, release notes, matching source documentation, and security scanning. Its stable-labeled release is still marked prerelease, while the install scripts and workflow permissions deserve review before adoption.
58%
Total Score
50
100
88
50
The package has eight releases over about one year, but only two releases in the last 12 months, indicating a modest and possibly slowing cadence.
The repository recorded no commits and no active maintainers in the last three months; with the last push about 10 months ago, maintenance appears inactive.
The repository has no published security policy, leaving a transparency gap for reporting and handling vulnerabilities.
This release is labeled stable but is technically marked as a prerelease, and every recent release is a prerelease, reducing release clarity.
Both workflows were analyzed successfully with no untrusted checkout or script-injection findings, but all five action references are unpinned and one workflow grants top-level write permissions.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/tinker Version ^2.10.1 | — | — |
tightenco/ziggy Version ^2.4 | — | — |
laravel/framework Version ^12.0 | — | — |
laravel/wayfinder Version ^0.1.12 | — | — |
nunomaduro/essentials Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.