Web frontend of seatplus
86%
Total Score
100
100
100
70
One pull_request_target workflow is present for Dependabot auto-merge. No untrusted checkouts or script-injection patterns were detected, so this is a contained workflow-risk caution rather than a severe finding.
No SECURITY.md or equivalent security policy was found, reducing vulnerability-reporting transparency and response guidance.
Two workflows lack top-level permissions and two declare write permissions, while no workflows declare read-only permissions. This weakens CI least-privilege hygiene and warrants caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
seatplus/auth Version ^5.1.1 | — | — |
seatplus/eveapi Version ^5.1.1 | — | — |
laravel/framework Version ^13.0 | — | — |
laravel/socialite Version ^5.0 | — | — |
laravel/wayfinder Version ^0.1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.