The repository includes tests and a changelog, and the latest release is recent. Unpinned workflow actions, limited release cadence, and no security policy leave maintenance and build-reproducibility concerns.
69%
Total Score
50
83
50
The package has only three releases across about two years, with one release in the last 12 months and a median interval of about 351 days. The latest release is recent, which partly offsets the slow cadence but leaves limited evidence of sustained delivery.
All recent commits came from one contributor, so maintenance depends heavily on a single person and has limited demonstrated handoff capacity.
The repository recorded one commit in the last three months, showing current activity but only a thin recent maintenance signal.
The repository has no documented security policy, reducing transparency for reporting and handling security issues.
All four analyzed action references are unpinned, weakening build reproducibility, although the audit found no untrusted checkouts, script injection, dangerous triggers, or high-severity findings.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
blade-ui-kit/blade-icons Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.