A feedback board, public roadmap and changelog for Laravel: people ask, vote and comment, you build, and they hear when it ships.
72%
Total Score
caution
This is a first release with no established commit history, and all eight workflow actions are unpinned.
Only one registry account has publish access, which creates a narrow publishing base. The organization-owned repository provides some compensating backing, making this a modest concern rather than a severe one.
This is the package's first release, published less than 1 day ago, so there is no release track record yet. That limits maturity evidence but is consistent with a genuinely new project.
There were no commits and no active maintainers in the measured three-month window. Because the repository and release are less than 1 day old, this reflects insufficient history more than demonstrated abandonment, but it lowers confidence in long-term maintenance.
Both workflows were fully audited with no findings or untrusted checkouts, but all 8 action references are unpinned and one workflow grants top-level write permissions. The write scope is only a mild concern here because no untrusted trigger or sink was found.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^12.4.1|^13.0 | — | — |
league/commonmark Version ^2.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.