The Laravel Framework.
18%
Total Score
50
67
75
The package is marked abandoned on Packagist at package scope, with no replacement specified. This is a severe warning for taking a new dependency.
The latest registry release was October 29, 2019, and there were no releases in the last 12 months. The long historical release record does not compensate for this prolonged staleness.
The repository recorded zero commits and zero active maintainers in the last three months. This indicates little current maintenance capacity, even though the repository is not archived.
All 8 analyzed action references are unpinned, and the audit found a high-confidence use of a container image tagged latest. The workflow has no untrusted checkout or script-injection findings, but floating build inputs remain a supply-chain hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.7 | — | — |
opis/closure Version ^3.1 | — | — |
nesbot/carbon Version ^2.0 | — | — |
psr/container Version ^1.0 | — | — |
symfony/debug Version ^4.3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.