Clear documentation, tests, a changelog, and a security policy support day-to-day use. The workflow has no reported audit findings, though its action references are not pinned.
68%
Total Score
67
86
100
The repository is owned by a user account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
The package is only 39 days old, but it has five releases in that period with a median interval of about 1.5 days, showing active early development rather than abandonment.
All 34 recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.
Version v0.5.0 is not a stable major release, so its public API may still change even though it is not marked as a prerelease.
The only workflow was fully analyzed with no reported audit findings or untrusted-code sinks. However, all six action references are unpinned, leaving builds exposed to mutable action changes.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^3.0 | — | — |
sabre/vobject Version ^5.0 | — | — |
illuminate/http Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.