Package Health

artisanpack-ui/google-business-profile

Documentation, repository tests, two active contributors, and organizational backing provide a solid maintenance base. The missing security policy and workflow cache finding leave some transparency and build-hygiene concerns.

Latest v1.0.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historycaution

This is the package's first release, published less than one day ago, so there is no release history or demonstrated long-term maintenance cadence.

Repo popularitycaution

The repository has no stars, forks, or watchers. This is weak supporting evidence, but it does not outweigh the observed development activity for a newly released package.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected, leaving a modest assurance gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response practices.

Workflow auditcaution

All 16 analyzed action references are unpinned, which weakens build reproducibility. The audit also found a low-confidence cache-poisoning pattern in the release workflow; because confidence is low, this is primarily hygiene rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jacob Martella

Direct Dependencies

DependencyLast ReleaseScore
illuminate/http
Version ^10.0|^11.0|^12.0|^13.0
illuminate/support
Version ^10.0|^11.0|^12.0|^13.0
artisanpack-ui/core
Version ^1.0

Weekly Downloads

Info

Last Published
9 hours ago
Created
9 hours ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform