The package includes a matching source repository, tests, a changelog, and clear MIT licensing. Its workflow uses three unpinned actions, and the registry's recorded version history is inconsistent with the assessed release.
43%
Total Score
50
75
67
The registry shows 26 releases but none in the last 12 months, with the latest release published in March 2023 and no ongoing release cadence. This is a substantial abandonment concern for a Laravel generator.
The repository had zero commits and zero active maintainers in the last three months, consistent with the stopped registry activity and indicating no recent maintenance capacity.
The repository has no security policy and no stated security-scanning tool. This does not establish a security defect, but it weakens the project's transparency and response process.
The assessed release is v5.4.2, while the registry records v4.2.5 as the latest version; although the release is marked stable rather than prerelease, this inconsistency reduces confidence in the published version metadata.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all three referenced actions are unpinned. That leaves the build exposed to changing action revisions and is a moderate hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laracasts/flash Version ^3.2 | — | — |
illuminate/console Version ^9.0 | — | — |
illuminate/support Version ^9.0 | — | — |
symfony/var-exporter Version ^6.0 | — | — |
laravelcollective/html Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.