codebar-ag/laravel-event-logs
The package includes extensive tests, a substantial README, a changelog, and repository security tooling. Recent commit activity is absent despite frequent releases, and the workflow audit found fully unpinned actions plus a high-confidence bot-condition issue; pin this version while maintenance remains clear.
70%
Total Score
75
100
100
100
Health Score Breakdown
No commits or active maintainers were recorded in the last three months. This conflicts with the frequent release history and recent repository push, but the measured inactivity still creates a maintenance concern.
All 20 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. A pull_request_target trigger and two workflows with write permissions are not severe on their own because no untrusted checkout or script injection was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sebastian Bürgin-Fix |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^13.0 | — | — |
illuminate/queue Version ^13.0 | — | — |
illuminate/console Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.