It includes tests, a changelog, release notes, a matching repository, and a security policy. MIT licensing and no install-time scripts reduce adoption friction, but the short history provides limited evidence of long-term maintenance.
68%
Total Score
100
94
83
The package is only 3 days old, despite having 5 releases in that time. This shows active initial publishing but leaves little evidence of sustained maintenance.
The single workflow was fully analyzed with no detected injection, untrusted-checkout, or high-confidence audit findings. However, all 6 action references are unpinned, weakening build reproducibility and increasing exposure to upstream action changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mpdf/mpdf Version ^8.2 | — | — |
laravel/sanctum Version ^4.0 | — | — |
google/apiclient Version ^2.19 | — | — |
guzzlehttp/guzzle Version ^7.8|^8.0 | — | — |
laravel/framework Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.