The release includes tests, release notes, and a security policy. The license is clear and it has no install-time scripts, while workflow action pinning remains basic.
68%
Total Score
67
100
100
100
One contributor made all recent commits, so the observed maintenance capacity is concentrated in a single person.
Only one commit was recorded in the last three months, showing limited recent development activity and reducing confidence in ongoing maintenance.
The single workflow was fully analyzed with no injection or high-severity findings, but all three referenced actions are unpinned, weakening build reproducibility and update safety.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.