Sculptor Devops Agent
40%
Total Score
25
80
50
The latest release was about five years ago, with no releases in the last 12 months. The eight-release history shows an established package but not ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that is no longer actively maintained.
The package runs post-autoload-dump, post-create-project-cmd, and post-root-package-install scripts, increasing install-time behavior and review burden for consumers.
There were no new or closed issues or pull requests in the last month, while seven issues and five pull requests remain open; this suggests unresolved project activity rather than active stewardship.
The linked repository has no security policy. This weakens vulnerability-reporting transparency, especially for a package that manages operational and infrastructure tasks.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^5.1 | — | — |
laravel/tinker Version ^2.0 | — | — |
fideloper/proxy Version ^4.2 | — | — |
laravel/passport Version ^10.0 | — | — |
spatie/db-dumper Version ^2.17 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.