A simple package that adds the impersonate operation for admins
65%
Total Score
67
100
93
75
Only one registry account has publish access, and the repository is owned by an individual rather than an organization. This is a limited maintainer base, though the release history shows that the owner has continued publishing.
The repository recorded zero commits and zero active maintainers in the last three months. That quiet period is notable for a package with a recent release and weakens evidence of ongoing maintenance.
Composer build tooling is present, but no security scanning tools were detected. For an authentication-related impersonation package, this reduces transparency around automated security checks.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in functionality that affects user identity and access.
No GitHub Actions workflows were present, so there are no workflow findings or token-permission concerns; this also means no automated workflow-based validation or release checks were observed.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
backpack/crud Version ^5.0|^6.0|^7.0 | — | — |
laravel/framework Version ^8.0.0|^9.0.0|^10.0.0|^11.0.0|^12.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.