bernskioldmedia/laravel-fortnox
Workflow automation has high-confidence bot-condition and unpinned-image findings, alongside broadly unpinned actions. Repository tests, changelog, licensing, organization backing, and security tooling provide useful support.
58%
Total Score
75
88
100
Health Score Breakdown
This is the package's only release, published about 145 days ago, so there is little release history to demonstrate sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful sign of currently limited maintenance activity.
Version 0.1.0 is not a stable-major release, which indicates an early API and maturity stage even though it is not marked prerelease.
The audit found high-confidence bot-condition and unpinned-image issues, all 11 action references unpinned, and one workflow with top-level write permissions; the pull request target has no untrusted checkout or script-injection sink, limiting the severity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Bernskiold Media |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 neam/php-sie Version 3.3.3.1 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
laravel/socialite Version ^5.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.