Its documentation, tests, changelog, and exact-version release notes make integration easier. The small release history, absent recent commit activity, missing security policy, and unpinned workflow actions leave maintenance and build-reproducibility concerns.
68%
Total Score
75
100
88
83
Only two releases exist over 142 days, and both were published within the same day, leaving limited evidence of a sustained release cadence.
No commits or active maintainers were recorded in the last three months. The recent repository push and three merged pull requests provide some counterevidence, but do not establish ongoing commit activity.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, which makes vulnerability reporting and response expectations less clear for a package handling authentication-related integration.
The sole workflow was fully analyzed with no unsafe triggers, untrusted checkouts, script injection, or audit findings, and it scopes permissions at job level. However, all four action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/forms Version ^5.0 | — | — |
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.