This is my package dashed-ecommerce-webwinkelkeur
82%
Total Score
healthy
Active releases and project support are strong, but GitHub Actions hygiene keeps this package below the top tier.
All three workflows were analyzed, but two high-confidence findings remain: spoofable bot conditions in the Dependabot auto-merge workflow and an unpinned container image. All five action references are unpinned and two workflows grant top-level write permissions; no untrusted checkout or script injection was found, limiting the impact to caution rather than danger.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webwinkelkeur/client Version ^1.4 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.