The repository is organized for contributors, with tests, release notes, a clear MIT license, and no install-time scripts. Workflow references are not pinned, and the project has no security policy or automated security scanning.
62%
Total Score
75
100
88
75
The latest registry release was published on May 27, 2024, with no releases in the following 12 months, indicating a prolonged pause in package maintenance. The historical 122 releases show the project was previously active but do not offset the current gap.
No commits or active maintainers were recorded in the last three months, weakening evidence of ongoing development. The recent repository push prevents this from being evidence of abandonment by itself, so the net impact is caution rather than danger.
The project uses Make and Composer build tooling, but no security-scanning tools were detected. This is a modest transparency and maintenance gap for a dependency project.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
All 9 analyzed action references are unpinned, reducing build reproducibility and increasing exposure to action changes. The pull_request_target workflow has no untrusted checkout or script-injection sink, and the audit found no high- or medium-severity findings.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^10.13 || ^11.0 | — | — |
zircote/swagger-php Version ^4.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.