The small dependency set and complete documentation make integration straightforward. The repository is organization-backed, but recent commits are quiet and the workflow audit found an unpinned container image.
76%
Total Score
83
100
89
75
The package has 11 releases since February 2021 and one release in the last 12 months, but the median release interval is about 161 days, indicating a deliberately slow cadence rather than rapid maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. The recent release and push provide some compensation, but the current contributor activity is quiet.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.
The repository has no published security policy, reducing transparency about vulnerability reporting and response procedures.
All seven analyzed action references are unpinned, and the audit found a high-confidence unpinned container image. The workflows have no untrusted checkout or script-injection findings and no top-level write permissions, which limits the impact to workflow hygiene rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.