The package includes tests, a clear README, an MIT license, and a security policy. The repository had no commits in the last three months, and its workflow uses an unpinned container image.
68%
Total Score
50
100
75
There were zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release and recent repository push provide some compensation.
All three workflows were analyzed with no untrusted checkouts or script injection, but the audit found a high-confidence unpinned container image and all six action references are unpinned. This weakens build reproducibility and workflow hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.0|^12.0|^13.2.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.