Bridge between padosoft/eval-harness and the laravel/ai SDK: turn an AgentResponse into a scoreable trajectory, evaluate multi-turn conversations, and assert an agent against a golden dataset from Pest or PHPUnit.
78%
Total Score
healthy
Healthy for now, with active maintenance and solid package documentation outweighing its very recent history and workflow hygiene gaps.
The package is only 28 days old with three releases, so long-term maintenance is not yet proven; however, all three releases arrived recently and activity is current.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Both workflows were analyzed without high-confidence audit findings or unsafe-trigger sinks, but all three action references are unpinned and one workflow grants top-level write permissions, creating moderate workflow hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^7.0|^8.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
padosoft/eval-harness Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.