c6digital/laravel-basic-auth
The repository has tests, a changelog, and a stable release with notes. It lacks a security policy, and its automation uses broad permissions and unpinned actions.
62%
Total Score
75
93
50
Health Score Breakdown
Only two releases have been published over about 825 days, with one release in the last 12 months. The recent release is positive, but the long interval indicates a thin maintenance cadence.
The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance concern despite the repository being pushed more recently overall.
The repository has no security policy file or other recorded security-reporting policy. For middleware handling authentication credentials, this is a transparency gap.
The audit found a high-confidence bot-condition issue, all 12 analyzed action references are unpinned, and three workflows grant top-level write permissions. No untrusted checkout or script-injection sink was found, so this is a serious hygiene concern rather than a standalone critical risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ryan Chandler |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^11.0 || ^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.