The repository has no security policy, and its single workflow uses one unpinned action. The package is well documented, actively developed, and has tests, while its modest popularity is only supporting evidence.
78%
Total Score
100
100
86
67
The repository has 1 star, 0 forks, and 0 watchers. This offers little independent adoption evidence, but popularity is supporting evidence rather than a health verdict.
The project uses Composer for builds but reports no security-scanning tools. The active build tooling helps, while the missing scanning is a modest transparency and hygiene gap.
The repository has no security policy. That weakens the documented process for reporting and handling vulnerabilities, although it does not by itself indicate abandonment.
The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings; its job-level permissions are scoped. However, its one action use is unpinned, leaving a small workflow supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^6.0 | — | — |
spatie/browsershot Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.