The package is well documented, licensed, and supported by an organization with active commits, tests, release notes, and security reporting. Its very recent history, single active contributor, and entirely unpinned workflow actions leave meaningful maturity and build-reproducibility concerns.
68%
Total Score
83
100
93
83
This is the package's first release, published 0 days ago, so there is no track record yet for maintenance, compatibility, or response to adoption feedback.
All 33 recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is visible, leaving a real continuity risk.
All three workflows were analyzed with no dangerous triggers, untrusted checkouts, injection findings, or write permissions. However, all 9 of 9 action references are unpinned, weakening build reproducibility and update integrity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^12.0|^13.0 | — | — |
roundly-consulting/enums-for-laravel Version ^1.0 | — | — |
roundly-consulting/money-for-laravel Version ^1.0 | — | — |
roundly-consulting/sluggable-for-laravel Version ^1.0 | — | — |
roundly-consulting/geolocation-for-laravel Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.