It is well documented, licensed, and backed by an organization with a security policy. The workflow is fully analyzed and uses read-only permissions, though its three action references are unpinned.
12%
Total Score
50
63
Packagist marks the entire package as abandoned, with no replacement package supplied. Package-level deprecation is a severe warning for a new dependency.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the archived status, this indicates that ongoing fixes and support should not be expected.
The linked Laravel Homestead repository is archived, and its last push was in November 2024. An archived source project is a severe abandonment risk even with substantial historical popularity.
The package has a long history with 226 releases, but it had no releases in the 12 months before collection and its latest registry release was in April 2024. This supports a substantial maintenance concern.
There were no new or closed issues and no new or merged pull requests in the last month, leaving open work without evidence of current maintenance. This reinforces the inactivity shown by commit data.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^6.0 || ^7.0 | — | — |
symfony/console Version ^6.0 || ^7.0 | — | — |
symfony/process Version ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.