Laravel PHP SDK for CloudConvert APIs
72%
Total Score
83
100
88
75
The package has existed since December 2019, but only 10 releases and one release in the last 12 months indicate a slow release cadence. The latest release is recent, which partly offsets the concern.
No commits or active maintainers were recorded in the last three months. The recent release partly compensates, but the current source activity still leaves maintenance capacity uncertain.
Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance gap, not evidence of unsafe behavior by itself.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The single workflow was fully analyzed with no dangerous audit findings or untrusted execution paths. However, all three action references are unpinned, which weakens build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.2 | — | — |
illuminate/http Version ~5.8.0|^6.0|^7.0|^8.0|^9.0|^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/routing Version ~5.8.0|^6.0|^7.0|^8.0|^9.0|^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/support Version ~5.8.0|^6.0|^7.0|^8.0|^9.0|^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/container Version ~5.8.0|^6.0|^7.0|^8.0|^9.0|^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.