Filter user input for XSS but don't touch other html
68%
Total Score
caution
Usable with caveats: a recent release is offset by no commits in three months and a single registry maintainer.
Only one account has registry publish access, leaving limited publishing redundancy; the linked repository is user-owned, so there is no organization backing shown to compensate.
The project has existed since 2018 with 22 releases, but only one release in the last 12 months; the latest release still provides some evidence of ongoing maintenance.
There were zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have slowed after the latest release.
The repository uses Composer and Make, but no security scanning tools were detected, leaving a modest source-maintenance gap.
No security policy is present in the repository, reducing transparency for reporting and handling vulnerabilities in an XSS-focused package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.