The repository includes tests, a security policy, and automated scanning. It is a first release, so long-term maintenance is unproven; pin workflow actions before relying on its release automation.
73%
Total Score
100
94
83
Version 1.0.0 is the package's only release, published 0 days ago, so there is not yet evidence of sustained maintenance or release consistency.
All 5 workflows were analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 12 action references are unpinned, leaving workflow dependencies exposed to changing upstream code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/mcp Version ^1.0.1 | — | — |
illuminate/http Version ^12.41.1|^13.0 | — | — |
illuminate/view Version ^12.41.1|^13.0 | — | — |
illuminate/routing Version ^12.41.1|^13.0 | — | — |
illuminate/support Version ^12.41.1|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.