akira/laravel-crypto
Documentation, repository tests, and a security policy provide useful transparency for consumers. Workflow hygiene is mixed, with all five actions unpinned and one high-confidence bot-condition finding.
62%
Total Score
75
100
93
75
Health Score Breakdown
The package runs a post-autoload-dump install lifecycle script, which is common Composer integration behavior but adds execution during installation.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful warning that current maintenance may have slowed or paused.
Version 0.3.0 is not a prerelease, and recent releases contain no prerelease versions, but the package remains below a stable 1.0 major.
All five analyzed action references are unpinned, and a high-confidence bot-conditions finding reports spoofable actor context in the Dependabot auto-merge workflow; no untrusted checkout or script injection was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 kidiatoliny |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^11.0||^12.0 ||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.92.4 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.