Laravel (PHP) client that uses Discord HTTP API to create and respond to interactions
82%
Total Score
healthy
Healthy, with recent maintenance and solid project hygiene; one high-confidence workflow condition warrants attention.
A post-autoload-dump install script is present, which adds execution during installation and deserves awareness, but the signal does not show unsafe behavior.
The repository is owned by an individual rather than an organization, so there is no organizational handoff evidence; recent activity from two contributors partly offsets that limitation.
The repository has 1 star, 0 forks, and 1 watcher, indicating limited external adoption; this is supporting context rather than evidence of abandonment.
Version 0.11.0 is not a stable-major release, but it is a regular release rather than a prerelease and recent releases have no prerelease share.
All five workflows were analyzed, all 12 action references are pinned, and every workflow has read-only permissions. A high-confidence bot-conditions finding in the Dependabot auto-merge workflow is a workflow hygiene concern, but there are no untrusted checkouts or script-injection findings.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spatie/laravel-data Version ^4.6 | — | — |
illuminate/contracts Version ^10.0||^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.