The repository has tests, release notes, a matching project, MIT licensing, Dependabot, and a security policy. Pin workflow actions before relying on its automated build, and expect limited track record from this new project.
68%
Total Score
75
50
93
67
The package declares 18 runtime dependencies, including many Laravel components and three related Roundly Consulting packages, creating meaningful dependency surface and upgrade coupling.
A post-autoload-dump install script runs during Composer installation, adding installation-time behavior that consumers should understand, though this is common for framework packages.
This is the package's first release, published 0 days ago, so there is no release track record yet; the GitHub release notes provide some initial transparency.
The repository has 0 commits and 0 active maintainers in the last 3 months, but the package itself is 0 days old, so this reflects limited history rather than demonstrated abandonment.
All 3 workflows were analyzed with no untrusted checkouts, script injection, or high-severity findings. However, all 10 action references are unpinned, so workflow dependencies can change unexpectedly.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/log Version ^12.0|^13.0 | — | — |
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/cache Version ^12.0|^13.0 | — | — |
illuminate/events Version ^12.0|^13.0 | — | — |
illuminate/console Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.