Your route:list, sir.
46%
Total Score
unhealthy
Risky: no releases or commit activity for about five years, despite a documented and licensed package.
The latest of only three releases was published about five years ago, with no releases in the last 12 months. That long silence is a substantial maintenance and compatibility concern.
The repository recorded no commits and no active maintainers in the measured three-month period, reinforcing the evidence of prolonged inactivity.
All 7 action references are unpinned, and the audit found a high-confidence unpinned container image in php-cs-fixer.yml. This creates avoidable build reproducibility and workflow supply-chain risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^7.0|^8.0 | — | — |
spatie/laravel-package-tools Version ^1.4.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.