bambamboole/laravel-webhooks
The project is only 49 days old and all 38 recent commits come from one contributor. Clear licensing, tests, release notes, and active releases help, but missing security scanning and unpinned workflow actions leave meaningful maintenance and build-integrity gaps.
68%
Total Score
67
100
81
50
Health Score Breakdown
The package declares post-autoload-dump, post-install-cmd, and post-update-cmd scripts, increasing install-time execution surface; no provided signal shows these scripts are harmless or narrowly scoped.
The repository is owned by a user account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
The package is very young at 49 days, but it has shipped 7 releases in that period with a median interval of about 2 days, showing active development rather than abandonment.
All 38 recent commits came from one contributor, leaving the project dependent on a single maintainer for fixes and ongoing support.
Composer build tooling is present, but no security-scanning tools were detected, leaving a gap in automated security hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Manuel Christlieb |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
spatie/laravel-webhook-server Version ^3.10 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.