Documentation is thorough and the source includes tests, a changelog, and a security policy. Repository activity has paused for three months, while every analyzed workflow action is unpinned, weakening maintenance and build reproducibility.
68%
Total Score
75
100
100
75
The repository recorded no commits and no active maintainers in the last three months. The strong release history and June 2026 push partly offset this pause, but it still raises maintenance concern.
All 8 of 8 analyzed action references are unpinned, reducing build reproducibility. No dangerous triggers, untrusted checkouts, script injection, or audit findings were detected, so this remains a hygiene caution rather than a severe workflow risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^5.0 | — | — |
illuminate/contracts Version ^11.0 || ^12.0 || ^13.0 | — | — |
spatie/laravel-package-tools Version ^1.15 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.