Good documentation and basic safeguards improve confidence. The automation setup still needs tightening before relying on its release workflows.
62%
Total Score
67
93
100
This package is 172 days old but has only one release, so its release track and long-term maintenance record remain limited.
All two recent commits came from one contributor, leaving maintenance dependent on a single active developer despite organization ownership.
Only two commits were recorded in the last three months, indicating limited recent activity for a package with a short release history.
All five workflows were analyzed, but all 12 action references are unpinned and one high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. Three workflows also grant top-level write permissions, making the automation hygiene a meaningful caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/auth Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.