131studios/watchtower-agent
Watchtower monitoring agent for Laravel sites
72%
Total Score
caution
A young package with strong tests and active commits, but every GitHub Action reference is unpinned.
Health Score Breakdown
The package is only 47 days old and all 7 releases occurred on the same day, showing rapid initial iteration but limited evidence of sustained maintenance.
Composer build tooling is present, but no security-scanning tool was detected; this is a moderate transparency and maintenance gap rather than a severe risk.
The repository has no security policy, which leaves vulnerability-reporting and response expectations undocumented.
Version v0.5.1 is not a stable major release, so its API and behavior may still change as the young project matures.
Both workflows were fully analyzed with no untrusted checkouts, script injection, or high-severity findings. However, all 4 action references are unpinned, weakening build reproducibility and action supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.8 | — | — |
laravel/framework Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 2 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.