The package is licensed, documented, and backed by an organization with repository tests. Its stable release and modest dependency set help, but the thin release history limits confidence.
58%
Total Score
75
94
The package has only three releases over about 2 years and 6 months, with a median interval of about 1 year and 17 days and one release in the last 12 months. This is a thin maintenance record for a dependency.
The repository recorded zero commits and zero active maintainers over the last three months. That recent lack of development lowers confidence in ongoing maintenance.
All 12 analyzed action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects Dependabot automation. There is no untrusted checkout or script-injection finding, but the combined workflow hygiene warrants caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^10.0||^11.0||^12.0||^13.0 | — | — |
league/flysystem-aws-s3-v3 Version ^3.25 | — | — |
league/flysystem-read-only Version ^3.23 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
league/flysystem-path-prefixing Version ^3.23 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.