byrcsc/laravel-comments
The repository includes tests, release notes, a security policy, and active recent work. Its workflows use broad write permissions and all 13 action references are unpinned, adding supply-chain hygiene risk.
68%
Total Score
88
100
89
100
Health Score Breakdown
This is the first and only release, published 47 days ago, so there is not yet enough history to demonstrate sustained release maintenance.
One contributor made all 11 recent commits, leaving maintenance dependent on a single active person. Organization backing helps with handoff potential but does not show a second active contributor.
The repository has zero stars, forks, and watchers. This is weak supporting evidence for maturity, though the package is only 47 days old and popularity is not decisive.
All three workflows were analyzed with no audit findings or unsafe untrusted checkouts, but all 13 action references are unpinned and one workflow grants top-level write permissions. These are meaningful workflow hygiene and update-integrity concerns without evidence of an exploitable sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ryan Catapang |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/events Version ^12.0||^13.0 | — | — |
illuminate/support Version ^12.0||^13.0 | — | — |
illuminate/database Version ^12.0||^13.0 | — | — |
illuminate/contracts Version ^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.