Package Health

caminodeldev/laravel-api-scaffold

Clear documentation, release notes, repository tests, and a security policy support responsible use. The workflow uses read-only permissions but leaves both actions unpinned, weakening build reproducibility.

Latest v0.4.0PackagistPackagist

70%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historycaution

The package is only 52 days old, although it has already shipped 8 releases with a frequent cadence. This shows active early development but provides limited evidence of long-term maturity.

Repo bus factorcaution

All 53 recent commits came from one contributor, creating a real continuity risk. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The repository's security policy partly offsets the transparency gap, but not the lack of automated scanning.

Version stabilitycaution

v0.4.0 is not a stable major release, so its API and generated output may still change substantially. It is not marked as a prerelease, which provides some compensation.

Workflow auditcaution

The workflow was fully analyzed, uses read-only permissions, and has no reported audit findings or untrusted execution paths. Both of its action references are unpinned, leaving a modest reproducibility and action-integrity concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ricardo Jofré

Direct Dependencies

DependencyLast ReleaseScore
illuminate/console
Version ^10.0|^11.0|^12.0|^13.0
illuminate/support
Version ^10.0|^11.0|^12.0|^13.0
illuminate/database
Version ^10.0|^11.0|^12.0|^13.0
illuminate/filesystem
Version ^10.0|^11.0|^12.0|^13.0

Weekly Downloads

Info

Last Published
22 days ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform