Laravel Remote Rule
60%
Total Score
caution
Usable with caveats: stalled recent activity and high-confidence workflow hygiene findings weaken confidence.
The package has made four releases since October 2021, but none in the last 12 months and the latest registry release was about two years and five months ago. This is a meaningful maintenance concern, though repository activity provides some counterevidence.
There were no commits and no active maintainers in the last three months. That suggests current maintenance has stalled even though the repository was pushed more recently.
All 11 action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow has broad write permissions, but no untrusted checkout or script injection was found, keeping this as a serious hygiene concern rather than a standalone health verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^9.0|^10.0|^11.0 | — | — |
illuminate/support Version ^9.0|^10.0|^11.0 | — | — |
illuminate/database Version ^9.0|^10.0|^11.0 | — | — |
illuminate/contracts Version ^9.0|^10.0|^11.0 | — | — |
spatie/laravel-package-tools Version ^1.14.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.