The headless, multi-tenant help-desk engine for Laravel: tickets on any model, workflow, SLA, routing, email & widget channels, AI with human hand-over, knowledge base, KPIs, MCP and RAG.
62%
Total Score
caution
A first release with no observed commit history and all 19 workflow actions unpinned leaves maintenance and build hygiene unproven.
The package runs a post-autoload-dump install-time script. This is a supply-chain and installation-review consideration, though the single hook is not by itself evidence of unsafe behavior.
This is the package's first release, published today, with only one release recorded. That leaves maintenance consistency and long-term stability unproven.
The repository recorded zero commits and zero active maintainers over the last three months. Because this is a release-day project, the value may reflect limited observation time, but ongoing maintenance is not yet demonstrated.
All seven workflows were analyzed successfully with no reported audit findings or untrusted checkouts. However, all 19 analyzed action references are unpinned, and three workflows grant top-level write permissions; the broad permissions are only a mild concern because no untrusted sink was found.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.