The project has a small user base and no security policy or automated security scanning. Organization backing, repository tests, regular releases, and clear licensing provide reassurance, but workflow references are all unpinned.
60%
Total Score
75
100
88
50
The repository recorded zero commits and zero active maintainers in the last three months, indicating that maintenance activity has recently stalled.
The repository has zero stars and forks and only one watcher, so there is little community evidence to offset the thin recent activity.
Composer build tooling is present, but no security scanning tools were detected, leaving automated security hygiene unconfirmed.
The repository has no security policy, which makes vulnerability reporting and response expectations less transparent for users of an authentication-related package.
Both workflows were analyzed with no reported dangerous findings, but all five action references are unpinned and one workflow grants top-level write permissions, creating avoidable maintenance and supply-chain hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^10.0||^11.0||^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.