Tools for creating Laravel packages
38%
Total Score
unhealthy
Risky: no release or repository activity since February 2021, with unpinned workflow images adding supply-chain hygiene risk.
The package has 14 releases but none in roughly five years and seven months, with the latest release on February 27, 2021. That long inactivity is strong evidence of abandonment risk for a dependency.
The repository is owned by an individual account rather than an organization, so there is no observed organizational backing to compensate for the thin recent activity.
The project uses Composer build tooling, but no security scanning tools were detected. Given the repository's long inactivity, the lack of security scanning adds a modest hygiene concern.
Both workflows were analyzed completely and have no untrusted checkout or script-injection findings, but all four action references are unpinned and the audit found a high-confidence unpinned container image. This weakens build reproducibility and workflow supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mockery/mockery Version ^1.4 | — | — |
illuminate/contracts Version ^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.