Documentation, tests, licensing, and package structure are solid. Maintenance evidence is thin after the initial release, and all six workflow actions are unpinned, so pinning this version deserves care.
67%
Total Score
50
92
100
This is the only release, published about eight months ago, with no subsequent release activity. That is a meaningful maturity and maintenance concern for a package users may adopt long term.
The repository recorded zero commits and zero active maintainers in the past three months, with its last push about eight months ago. The complete lack of recent activity lowers confidence in ongoing maintenance.
The single workflow was fully analyzed with no dangerous sinks or audit findings, but all six action references are unpinned. This is a workflow supply-chain hygiene gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.