The workflow uses five unpinned actions and includes a broad top-level write token. The MIT declaration and repository tests provide useful transparency, but maintenance evidence remains thin.
48%
Total Score
0
64
50
There were zero commits and zero active maintainers in the last three months, despite the repository being only 183 days old, leaving little evidence of ongoing maintenance.
Install and update lifecycle scripts are present, including post-create-project-cmd, which is normal for a Laravel starter application but increases install-time behavior.
The package includes tests and has a GitHub release for this version, which supports project maturity; the missing README is a minor consumer-documentation gap for a starter application.
This is a young package at 183 days old with only one release and no established release cadence, so its maintenance track record is limited.
The repository name does not match the package name, and the README could not be confirmed to mention the package, so the source-package relationship is less transparent.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/tinker Version ^3.0 | — | — |
laravel/fortify Version ^1.34 | — | — |
laravel/framework Version ^13.0 | — | — |
laravel/wayfinder Version ^0.1.14 | — | — |
inertiajs/inertia-laravel Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.