The repository includes tests, a clear Apache-2.0 license, and automated dependency updates. Workflow references are unpinned, and a low-confidence cache warning adds a smaller hygiene concern.
58%
Total Score
67
88
75
This is the package's only release, published about three years ago, with no releases in the last 12 months. That leaves compatibility and ongoing maintenance uncertain.
The repository recorded no commits and no active maintainers in the last three months. The recent push noted elsewhere does not compensate for the absence of observed commit activity in this period.
There are seven open pull requests but no new or merged pull requests in the last month, which suggests limited current review or integration activity.
Version 0.1.0 is not marked as a prerelease, but it remains an early major version and is the package's only published version, limiting evidence of compatibility maturity.
All four analyzed action references are unpinned, which weakens build reproducibility. The cache-poisoning finding has low confidence and is a hygiene concern rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^3.6 | — | — |
illuminate/cache Version ^10.23 | — | — |
saloonphp/saloon Version ^2.11 | — | — |
illuminate/database Version ^10.23 | — | — |
saloonphp/laravel-plugin Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.