The repository includes tests, release notes, a license, and a security policy. Workflow automation has broad write permissions and all 11 action references are unpinned.
62%
Total Score
75
100
88
100
This is the only release, published 156 days ago, so there is not yet evidence of an established release cadence or long-term maintenance.
The repository recorded zero commits and zero active maintainers during the last three months. For a package with only one release, that is a meaningful maintenance concern despite the recent push date.
Version v0.1.0 is a pre-1.0 release, and its notes explicitly say the API may change before v1.0.0. That increases compatibility risk for adopters.
All five workflows were analyzed, but all 11 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects Dependabot auto-merge. No untrusted checkout or script-injection sink was found.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
saloonphp/saloon Version ^4.0 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.