The repository includes tests, a clear README, and matching licensed source, while its workflow has two unpinned actions. There is no maintenance history yet, so longer-term reliability remains unproven.
62%
Total Score
100
100
86
67
This is the package's first release and it was published less than 1 hour ago, so there is no release history or demonstrated maintenance cadence yet.
Composer build tooling is present, but no security scanning tool was detected; this is a modest repository hygiene gap for a package that renders documents and integrates with application code.
The repository has no security policy. This does not show a vulnerability, but it reduces transparency about how security reports and fixes would be handled.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or write-wide permissions. However, both of its two action references are unpinned, leaving a supply-chain hygiene weakness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/view Version ^11.0|^12.0 | — | — |
illuminate/support Version ^11.0|^12.0 | — | — |
zentiq-labs/fast-pdf Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.