brennoluan/laravel-head
The repository has tests, a changelog, a security policy, and 42 commits from four active contributors. Six of eight workflow actions are unpinned, and one workflow grants broad write access; pin actions before production use.
72%
Total Score
67
100
94
83
Health Score Breakdown
The repository is owned by the individual registry namespace rather than an organization, so the project has less visible institutional backing; active commits and four contributors partly compensate.
This is a young package, released only once 49 days ago, so its long-term maintenance and compatibility track record are not yet established.
Four contributors are active, but one contributor made 35 of 42 commits, creating meaningful concentration risk despite the presence of additional contributors.
The audit found no untrusted checkouts, script injection, or other reported findings, but six of eight action references are unpinned and one workflow has top-level write permissions. These are workflow hygiene concerns, not severe risks here because no dangerous trigger or sink was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Taylor Otwell |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/view Version ^12.0 || ^13.0 | — | — |
illuminate/routing Version ^12.0 || ^13.0 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
illuminate/contracts Version ^12.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.