The package has a clear README, matching repository, MIT license, and security policy. Its workflows are fully analyzed but all four action references are unpinned, adding avoidable build-integrity risk.
42%
Total Score
50
70
75
The package has had no releases in the last 12 months, despite 78 releases being concentrated around its first publication in May 2022. This strongly suggests abandonment risk for a development tool.
There have been no new or closed issues or pull requests in the last month, while one issue and one pull request remain open. This is consistent with the package's stalled maintenance picture.
The repository is not archived, which is a positive counter-signal, but its last push was on December 23, 2022. The active status does not offset the prolonged lack of observed maintenance.
All three workflows were analyzed with no reported audit findings and no untrusted checkout or script-injection sinks. However, all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wp-cli/wp-cli Version ^2.6 | — | — |
illuminate/support Version ^8.0|^9.0 | — | — |
illuminate/contracts Version ^8.0|^9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.