Documentation, repository tests, and organization backing provide useful support. No commits landed in three months, while the repository lacks a security policy and all eight workflow actions are unpinned.
67%
Total Score
75
100
94
75
No commits and no active maintainers were recorded in the last three months. Although a recent release shows publication activity, the current lack of source changes raises maintenance risk.
Six issues and two pull requests remain open, with no new or closed items in the last month. The lack of recent issue activity is a modest sign of limited ongoing engagement.
The repository has two stars and no forks, indicating a very small user and contributor footprint. Popularity is only supporting evidence, so this is a minor concern rather than a decisive risk.
The repository has no security policy. This is a transparency and incident-reporting gap, though it does not by itself show that the package is unsafe.
Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all eight action references are unpinned, leaving build inputs less reproducible and increasing update risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^13.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.