driftingly/rector-laravel
The package has clear documentation and a broad contributor base. Its automated workflows need tighter dependency pinning, and a low-confidence cache warning adds maintenance risk.
82%
Total Score
100
100
100
75
Health Score Breakdown
No repository security policy was found, leaving vulnerability-reporting guidance less transparent than ideal for a dependency project.
All 9 analyzed action references are unpinned, and the audit reported a low-confidence cache-poisoning pattern in a release workflow. The incomplete pinning is a real hygiene concern, while the low-confidence finding is not severe on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 rector/rector Version ^2.6.4 | — | — |
webmozart/assert Version ^1.11 || ^2.0 | — | — |
symplify/rule-doc-generator-contracts Version ^11.2 | — | — |
Weekly Downloads
Info
- Last Published
- 22 days ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.