Release cadence is light and no commits were recorded in the last three months. The single workflow uses two unpinned actions and the repository has no security scanning, but tests, licensing, and organization backing add useful assurance.
78%
Total Score
75
100
88
67
The package has existed for about 9 years with 18 releases, but only one release appeared in the last 12 months and the median interval is about 173 days, indicating a quiet cadence.
No commits and no active maintainers were recorded in the last three months. This is a meaningful maintenance concern, although the release history shows a release during the last year.
Composer build tooling is present, but no security scanning tools were detected. That is a hygiene gap rather than evidence that the package is unsafe.
The repository has no security policy, reducing transparency for vulnerability reporting and response expectations.
The only workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but both of its two action references are unpinned. The missing top-level permissions block is acceptable on its own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
makeabledk/laravel-querykit Version ^3.0|^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.