Bot protection for Laravel forms: a built-in honeypot, signed form timing and optional proof-of-work, plus Cloudflare Turnstile, reCAPTCHA and hCaptcha drivers over plain HTTP. Fails closed, logs reasons without tokens, and ships a fake for host tests.
70%
Total Score
caution
First released on 6 November 2026 with one release, so its maintenance record is still very short.
The package was first released on 6 November 2026 and has one release, so there is little maintenance history.
The repository uses Composer but has no security scanning tools.
The assessed version is v0.1.0, the latest version, and it is not marked as a prerelease.
Both workflows were analyzed without audit failures, but all four action references are unpinned and publish.yml grants top-level write access.
We didn't find any vulnerabilities for this package.
| Version | Published | Vulnerabilities |
|---|---|---|
| v0.1.0 | 5 Nov 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| Dependency | Last Release | Score |
|---|---|---|
illuminate/log Version ^13.0 | — | — |
illuminate/http Version ^13.0 | — | — |
illuminate/cache Version ^13.0 | — | — |
illuminate/routing Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.