The license, documentation, tests, and source layout provide a solid foundation. However, the repository and registry show no activity since February 2021, while its workflows also use an unpinned container image.
38%
Total Score
0
80
75
The package has had no releases in the last 12 months, and its latest release was about 5 years 7 months ago. A large historical release count does not compensate for the current standstill.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the registry's lack of recent releases and indicating substantial abandonment risk.
The repository has no security policy. This is a transparency gap, especially for a package with no recent maintenance activity, although it is not evidence of a security defect by itself.
Both workflows were analyzed successfully and have no untrusted checkouts or script injection, but all four action references are unpinned and the audit found a high-confidence unpinned container image.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spatie/image Version ^1.4.0 | — | — |
illuminate/bus Version ^7.0|^8.0 | — | — |
symfony/console Version ^4.4|^5.0 | — | — |
league/flysystem Version ^1.0.64 | — | — |
illuminate/console Version ^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.