MIT licensing, a substantial artifact, and a security policy improve transparency. The project has only one release and no three-month commit record, so maintenance capacity remains unproven. Pin this version until follow-up releases establish continuity.
64%
Total Score
75
93
83
This is the package's first release, published today, with no established release cadence or history to demonstrate sustained maintenance.
The repository shows zero commits and zero active maintainers during the last three months; because the project is newly published, this is mainly unproven maintenance capacity rather than evidence of long-term abandonment.
The workflow audit completed successfully, found no dangerous sinks or high-severity findings, and confirmed read-only permissions; both referenced actions are unpinned, leaving a supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/ai Version ^0.8.1 | — | — |
laravel/mcp Version ^0.8 | — | — |
dompdf/dompdf Version ^3.1 | — | — |
laravel/framework Version ^13.0 | — | — |
league/commonmark Version ^2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.