Clear documentation, repository tests, licensing, and a security policy support adoption. Pin this version only if its older release line fits your Laravel application.
58%
Total Score
75
92
100
The latest release was published in April 2021, about five years ago, and there were no releases in the last 12 months. This is a substantial maintenance concern despite the package having five releases overall.
The repository recorded no commits and no active maintainers in the last three months. A push in September 2026 shows the repository is not wholly abandoned, but does not offset the lack of recent commit activity.
All seven action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in the PHP CS Fixer workflow. There were no untrusted checkouts or script-injection findings, limiting the concern to build reproducibility and workflow hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tipoff/support Version ^2.1.2 | — | — |
drewroberts/blog Version ^4.5.1 | — | — |
tipoff/authorization Version ^2.8.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.