The package has tests, release notes, a matching repository, and organizational backing. Recent commit activity is absent, while all nine workflow action references are unpinned and no security policy is published.
68%
Total Score
75
100
94
75
The package has existed since December 2022 with 14 releases and a latest release in March 2026. Only one release in the last 12 months suggests a slower cadence, but the recent release provides evidence of continued maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, indicating a current maintenance lull and increasing abandonment risk despite the recent release and push.
There are no open issues or pull requests, but there was also no issue or pull-request activity in the last month. This is mildly informative rather than a severe concern when considered with the recent release.
No repository security policy was found, reducing transparency for reporting vulnerabilities, although this is a hygiene gap rather than evidence of abandonment.
All four workflows were analyzed with no high-confidence audit findings or untrusted checkouts. However, all nine action references are unpinned and one workflow grants top-level write permissions; without an untrusted sink, these are workflow hygiene concerns rather than severe risks.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^12.0|^13.0 | — | — |
spatie/mailcoach-mailer Version ^1.2 | — | — |
spatie/laravel-package-tools Version ^1.13.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.