This release appears healthy and suitable to depend on: it has a long release history dating back about 7 years, 148 releases, regular recent releases roughly weekly, stable versioning, an active non-archived Laravel organization repository, and recent commits from five contributors. The package and repository include licensing, changelog, tests, CI, Dependabot, security policy, and controlled workflow permissions. The artifact does not include tests, but repository tests provide meaningful compensation; the single registry publisher is also less concerning because the project is backed by the Laravel organization. No material abandonment or transparency risk is evident from the provided signals.
94%
Total Score
100
100
100
90
Three workflows use read-only permissions and none omit top-level permissions, although one Dependabot auto-merge workflow has top-level write access; the narrowly identified write capability is a minor residual concern rather than a health blocker.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.8|^4.0 | — | — |
symfony/yaml Version ^4.2|^5.0|^6.0|^7.0|^8.0 | — | — |
symfony/console Version ^4.2|^5.0|^6.0|^7.0|^8.0 | — | — |
symfony/process Version ^4.2|^5.0|^6.0|^7.0|^8.0 | — | — |
league/flysystem Version ^1.0|^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.