changole/laravel-workflows
The package includes tests, a clear README, and a matching source repository, while its small dependency set limits integration risk. Security documentation is absent and both workflow actions are unpinned, leaving modest maintenance and build-reproducibility concerns.
68%
Total Score
50
100
88
83
Health Score Breakdown
The repository is owned by an individual rather than an organization, so the one-person publishing base represents limited continuity capacity.
All three releases were published within roughly 2 hours on February 27, 2026, with no later release during the following 203 days. That short burst provides little evidence of sustained maintenance.
Composer and Make tooling are present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy. For a library handling workflow transitions and audit history, that weakens vulnerability-reporting transparency.
The single workflow had no dangerous trigger, untrusted checkout, or script-injection finding, but both of its two action references are unpinned. That weakens build reproducibility without indicating a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Emmanuel Changole |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/events Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 7 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.