It has a long release history, a current stable release, repository tests, and release notes for this version. The missing security policy and workflow pinning reduce transparency and maintenance confidence.
68%
Total Score
50
100
75
The repository recorded zero commits and zero active maintainers in the last three months. Although the package released recently, this is a meaningful sign of currently limited maintenance activity.
The linked repository has no published security policy. This weakens vulnerability-reporting transparency, though it does not by itself indicate abandonment.
All five workflows were analyzed with no reported audit findings or untrusted sinks, but 13 of 14 action references are unpinned and two workflows grant top-level write permissions. These are workflow hygiene concerns without evidence of an active exploit path.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/fractal Version ^0.20.1 | — | — |
yajra/laravel-datatables-oracle Version ^13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.