Laravel Searchable
62%
Total Score
caution
Usable with caveats: high-confidence workflow weaknesses and very low project activity limit confidence in long-term maintenance.
Only three releases exist across about two and a half years, with one release in the last 12 months and a median interval of about 374 days. This suggests limited release momentum, though a recent release provides some counterevidence.
The repository recorded zero commits and zero active maintainers in the last three months. Although a release was published recently, the lack of ongoing development activity raises abandonment concern.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external sign of adoption or community support.
No repository security policy was found. This is a transparency gap for reporting vulnerabilities, though security scanning tooling provides partial supporting evidence.
All five workflows were analyzed, but all 11 action references are unpinned and the audit found two high-confidence issues: spoofable bot conditions and an unpinned container image. A pull_request_target workflow also has top-level write permissions, increasing workflow hygiene and supply-chain risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.14.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.