daniel-de-wit/laravel-ide-helper-hook-paperclip
A small maintainer base and no security scanning limit resilience. The repository has tests, a matching README, and release notes for this version, but workflow hygiene needs attention.
61%
Total Score
67
100
89
50
Health Score Breakdown
A post-autoload-dump install-time script runs during Composer installation, adding some execution risk compared with a package without lifecycle hooks.
Only one account has registry publish access. For this user-owned project that is a thin operational base, even though registry access does not prove who performs development work.
The package has existed for about 5 years and released once in the last 12 months, but its median release interval is about 227 days. The recent release shows it is not abandoned, though maintenance is infrequent.
The repository recorded zero commits and zero active maintainers in the last 3 months. The June 16 release provides some compensating evidence, but current development activity is quiet.
The project uses Composer and Make, but no security scanning tools were detected. That is a transparency and maintenance gap for a dependency distributed to other projects.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel de Wit |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/database Version ^11.0 || ^12.0 || ^13.0 | — | — |
czim/laravel-paperclip Version ^5.0 | — | — |
barryvdh/laravel-ide-helper Version ^3.0 || dev-master | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.