The source includes tests, a substantial README, and matching license files. Its workflow audit found no dangerous sinks, but dependency references are unpinned.
64%
Total Score
50
92
67
This is the first release and the package is 0 days old, so there is no release track record to demonstrate sustained maintenance.
The repository shows 0 commits and 0 active maintainers in the last 3 months; because the repository was created or updated only recently, this indicates limited evidence rather than clear abandonment.
The repository has no published security policy, reducing transparency for reporting and handling security issues.
Both analyzed action references are unpinned, which weakens build reproducibility, but the audit found no untrusted checkouts, script injection, dangerous triggers, or other reported findings.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dompdf/dompdf Version ^2.0|^3.0 | — | — |
illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/view Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.