It has a clear MIT license, a substantial README, repository tests, and a changelog, with no install-time scripts. The workflow audit found no dangerous patterns, but all seven actions are unpinned and no security policy is published.
64%
Total Score
0
88
75
The repository recorded zero commits and zero active maintainers during the last three months, which is a meaningful abandonment concern for a package whose latest release was recent.
The package is 96 days old with eight releases, but all releases arrived within roughly two days and the median interval was about 26 minutes, showing a brief burst rather than an established cadence.
The repository uses Composer, but no security scanning tools were detected. This is a transparency and maintenance gap, though it is not severe on its own.
No repository security policy was found, leaving no documented channel or process for reporting vulnerabilities.
The single workflow was fully analyzed with no dangerous audit findings or untrusted checkouts, but all seven action references are unpinned. The absence of a top-level permissions block is acceptable on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/bus Version ^11.0|^12.0|^13.0 | — | — |
illuminate/queue Version ^11.0|^12.0|^13.0 | — | — |
mike42/escpos-php Version ^2.2 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.