The documentation, release notes, tests, license, and security policy provide a solid starting point. It is too early to establish a dependable maintenance record, and all recent repository work comes from one contributor despite organizational ownership.
63%
Total Score
83
100
94
88
This is the package's first release, published 0 days ago, so there is no demonstrated release cadence or history of maintaining compatibility.
One contributor made all 18 recent commits, creating a concentrated maintenance risk. The organization-owned repository provides some handoff capacity, so this is a caution rather than a severe risk.
All 3 workflows were analyzed with no untrusted checkouts, script injection, or audit findings. However, all 9 action references are unpinned, leaving workflow dependencies exposed to upstream changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^12.0|^13.0 | — | — |
roundly-consulting/enums-for-laravel Version ^1.0 | — | — |
roundly-consulting/approvals-for-laravel Version ^1.0 | — | — |
roundly-consulting/package-toolkit-for-laravel Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.