The repository includes tests, a clear README, and an MIT license. Its small dependency set and Dependabot help, but workflow hygiene is weak.
42%
Total Score
0
100
83
50
The latest release was nearly three years ago, with no releases in the last 12 months. Six releases in the first few days show initial activity, but there is no recent release evidence to offset the long pause.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has had little recent maintenance. The last push was over two years ago, so this is a meaningful abandonment concern.
All 9 analyzed action references are unpinned, and the audit found one high-confidence bot-conditions issue in the Dependabot auto-merge workflow. A pull_request_target trigger is not risky by itself, but the combination leaves the project's maintenance automation below a good hygiene standard.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^10.0 | — | — |
google/cloud-translate Version ^1.15 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.