MIT licensing, repository tests, release notes, security policy, and Laravel organization backing provide good transparency. Recent inactivity and the pre-1.0 version make long-term support less certain, so confirm compatibility before upgrading.
68%
Total Score
75
83
75
The package has 13 releases over about 19 months, but only 2 releases in the last 12 months; this indicates a slower recent release cadence than its earlier history.
The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful maintenance warning, although the repository was pushed recently and the package is not archived.
v0.6.0 is not a stable major release, so its API may still change and dependency upgrades may require extra compatibility checking.
All 7 workflows were analyzed successfully, all 8 action references are pinned, and no audit findings or untrusted checkouts were detected. Four workflows use top-level write permissions, a mild hygiene concern, but no untrusted workflow path was found to amplify it.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
firebase/php-jwt Version ^7.0 | — | — |
workos/workos-php Version ^4.18 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.