The README, tests, changelog, release notes, and MIT license make the package straightforward to evaluate and adopt. Its single unpinned workflow action and absent security policy leave modest hygiene gaps.
65%
Total Score
50
93
50
The package has six releases, but none in the last 12 months; its latest release was about 13 months ago. This is a meaningful maintenance concern, though the project is not otherwise marked deprecated.
The repository recorded zero commits and zero active maintainers in the last three months. That indicates currently inactive development, without proving abandonment by itself.
The repository has no security policy. For a small library this is a transparency and response-process gap, but it is not evidence of an active security problem.
The only workflow was fully analyzed and has no trigger or audit findings, but its one action use is unpinned. That creates a modest reproducibility and workflow-hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^3.10 | — | — |
league/flysystem Version ^3.29 | — | — |
illuminate/support Version ^11.41 | — | — |
league/mime-type-detection Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.