atymic/laravel-spx-lambda
Clear documentation, tests, and a license make integration straightforward. The workflow is audited cleanly, but its security policy is absent and its action references are unpinned.
64%
Total Score
50
75
50
Health Score Breakdown
A post-autoload-dump script runs during installation, adding execution during dependency setup; no provided evidence shows that this is unsafe, so it is a limited supply-chain caution.
The package is only 45 days old and has two releases, both published within a few hours; this shows initial activity but provides little evidence of sustained maintenance.
One contributor made all three recent commits, leaving the project dependent on a single active maintainer and increasing continuity risk.
Three commits occurred in the last three months, all within the package's short 45-day lifetime; this demonstrates recent work but not durable maintenance.
The repository has zero stars, forks, and watchers. For a package only 45 days old this is weak supporting evidence rather than a standalone abandonment verdict.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 atymic |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.