The long release history, current release notes, tests, and Laravel organization backing provide strong continuity. Workflow permissions are broader than necessary in two files, but the repository is not archived and its actions are fully pinned.
78%
Total Score
75
100
100
100
There were no commits and no active maintainers in the last three months. This is a real maintenance concern, although the release history and recent repository push provide some counterevidence.
All four workflows were analyzed successfully, all five action references are pinned, and no dangerous triggers or untrusted checkouts were found. Two workflows grant top-level write permissions, a mild hygiene concern, but no audit findings connect that access to an untrusted path.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.