alexhackney/laravel-doppler
The package has a substantial README, repository tests, release notes, security policy, and automated dependency auditing. Its short history and reliance on one contributor make long-term maintenance less certain; pin this version until the project matures.
68%
Total Score
67
94
100
Health Score Breakdown
The package and repository are owned by an individual rather than an organization, so there is no shown organizational handoff capacity to offset the concentrated maintainer base.
One contributor made all five recent commits, leaving maintenance highly concentrated in a single person.
Version 0.3.0 is not a stable major release, so compatibility may still change; it is not marked as a prerelease, which partly offsets that concern.
All four workflows were analyzed without audit findings or untrusted checkouts, and three use read-only permissions. However, all 16 action references are unpinned and one workflow has top-level write permissions, creating a meaningful reproducibility and permissions-hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alex Hackney |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^12.0|^13.0 | — | — |
vlucas/phpdotenv Version ^5.4 | — | — |
illuminate/console Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.