Clear documentation, repository tests, and a recent release provide useful support. No commits appeared in the last three months, releases are infrequent, and all 11 workflow actions are unpinned; organization ownership helps, but does not remove these concerns.
68%
Total Score
75
100
92
The package has existed for 987 days with six releases and only one release in the last 12 months, showing a modest and infrequent release cadence. The latest release was recent, which reduces abandonment concern but does not offset the sparse history entirely.
The repository recorded 0 commits and 0 active maintainers in the last three months, indicating currently limited development activity. The recent release provides some contrary evidence, but the near-term activity gap remains a maintenance concern.
All 11 analyzed action references are unpinned, so workflow dependencies can change without a repository change; one workflow also grants top-level write permissions. The audit found no untrusted checkouts, script injection, or high-confidence dangerous findings, keeping this as build hygiene rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^10.0||^11.0||^12.0||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.