The repository has strong documentation, tests, licensing, security tooling, and recent merge activity. Its release history is too new to establish long-term stability, and one workflow shares inherited secrets, which warrants caution before broad adoption.
76%
Total Score
83
94
88
The package is only hours old with two releases and no established release cadence, so long-term maintenance and stability cannot yet be demonstrated.
No commits or active maintainers were recorded in the last three months, which is a maintenance warning, although the package age is only hours and recent pull-request activity provides some compensation.
All 12 workflows were analyzed, use read-only permissions, and pin all 30 action references, but a high-confidence medium-severity secrets-inherit finding shows a reusable workflow receives broader credentials than necessary.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^5.8.1 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.