This release appears suitable to depend on from a maintenance and transparency perspective: it is MIT-licensed, stable, not deprecated or archived, has published 13 releases over about 7 months, and is backed by an organization-owned repository with recent activity from three contributors. The repository has tests, changelog coverage, build tooling, and Dependabot/Sonar scanning, although the package has 11 runtime dependencies, no security policy, some workflows lack explicit permissions, and one workflow uses pull_request_target. Zero repository stars and forks provide little external adoption evidence, but are not decisive for this relatively young package.
82%
Total Score
100
50
94
60
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jenssegers/agent Version ^2.6 | — | — |
opscale-co/actions Version ^3.0 | — | — |
spatie/laravel-tags Version ^4.12 | — | — |
opscale-co/validations Version ^1.0 | — | — |
opscale-co/nova-package-tools Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.