Stops Laravel Fortify from revealing whether an account exists: neutral answers on registration and password reset, equal timing, and a notice to the owner.
70%
Total Score
caution
A very young pre-1.0 package with no established commit history, despite good documentation and repository hygiene.
The package is only 1 day old with 2 releases and a median interval of about 2 days, so there is not yet enough history to establish durable maintenance.
No commits or active maintainers were recorded in the preceding 3 months. Because the package is only 1 day old, this does not prove abandonment, but it leaves maintenance capacity unestablished.
The repository has 1 star and no forks or watchers. This is weak supporting evidence, but popularity alone does not determine the health of a newly published package.
This is a non-prerelease release, but the v0.x version indicates the public API and compatibility expectations may still change substantially.
No GitHub Actions workflows were present, so the audit found no workflow hazards; this also provides no CI evidence to compensate for the absent repository test suite.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/fortify Version ^1.0 | — | — |
laravel/framework Version ^13.0 | — | — |
symfony/http-foundation Version ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.