The repository includes tests, release notes, a license, and a security policy, while the organization provides project backing. Workflow actions are not pinned, adding a modest reproducibility concern.
68%
Total Score
83
100
93
83
This is the package's first release, published 0 days ago, so there is no release track record or demonstrated long-term maintenance yet.
All 32 recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving a real continuity risk.
All three workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 9 analyzed action references are unpinned, which weakens build reproducibility and supply-chain control.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^12.0|^13.0 | — | — |
roundly-consulting/enums-for-laravel Version ^1.0 | — | — |
roundly-consulting/crypto-for-laravel Version ^1.0 | — | — |
roundly-consulting/addresses-for-laravel Version ^1.0 | — | — |
roundly-consulting/connections-for-laravel Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.