The source includes tests, release notes for this version, and Composer security scanning. The organization-backed repository is not archived, but its small public footprint leaves less evidence of long-term maintenance.
62%
Total Score
75
100
93
50
The package has had no registry release in about 19 months, despite 13 releases over its lifetime. A repository push in March 2026 provides some evidence of continued work, but does not replace a recent release.
The repository recorded zero commits and zero active maintainers in the last three months. This is a concrete sign of currently limited maintenance activity, even though the repository was pushed in March 2026.
The repository has no published security policy. This is a transparency gap, though it is partly offset by the repository's Composer Audit tooling.
All three workflows were analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 15 action references are unpinned, leaving workflow dependencies exposed to tag or branch changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.48.23|^11.35|^12.0 | — | — |
symfony/polyfill-php83 Version ^1.31 | — | — |
laravie/serialize-queries Version ^3.0 | — | — |
laravel/serializable-closure Version ^1.0|^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.