Generate BRT (Bartolini) Documento di Ritiro pickup documents and segnacollo parcel labels
67%
Total Score
67
86
100
This is a 27-day-old package with only one release, so there is not yet enough history to establish dependable maintenance or release continuity.
One contributor made all recent commits, leaving no demonstrated handoff capacity if that contributor stops maintaining the project.
Only one commit was recorded in the last three months, so actual maintenance activity is currently very limited.
Version 0.0.1 is an early, non-stable-major release, which raises compatibility and maturity risk for adopters.
The audit completed all five workflows and found no reported security findings or untrusted checkout/script-injection sinks. However, all 12 action references are unpinned and three workflows use top-level write permissions, creating avoidable workflow-integrity and token-scope concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
setasign/fpdf Version ^1.8 | — | — |
setasign/fpdi Version ^2.3 | — | — |
intervention/image Version ^2.3 | — | — |
spatie/laravel-data Version ^4.7 | — | — |
illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.