codebar-ag/laravel-pwa
The project has a clear README, tests in the repository, a changelog, an MIT license, and security scanning. Its small release history and organization backing help, but workflow hygiene and the recent pause in commits warrant caution.
64%
Total Score
67
100
100
83
Health Score Breakdown
The package runs a post-autoload-dump install-time script, which adds some supply-chain exposure, but this signal alone does not indicate unsafe behavior.
The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete sign of recently slowed maintenance.
Three open issues and two open pull requests remain, with no issues or pull requests opened or merged in the last month; this is a modest maintenance concern.
All seven workflows were analyzed, but all 16 action references are unpinned and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; the pull_request_target trigger has no untrusted checkout or script-injection sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sebastian Bürgin-Fix |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^2.0 || ^3.0 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
illuminate/contracts Version ^11.0 || ^12.0 | — | — |
spatie/laravel-package-tools Version ^1.19 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.