duncanmcclean/statamic-cargo
Maintenance is active, with frequent releases, recent commits, and four active contributors. The workflow audit found one high-confidence bot-condition issue in Dependabot automation, which warrants a small operational caution.
86%
Total Score
83
100
100
Health Score Breakdown
The top contributor made about 67% of recent commits, which creates some concentration risk, although three other contributors were active during the same period.
All six workflows were analyzed successfully, use read-only permissions, and have no unpinned actions; however, a high-confidence bot-conditions finding reports spoofable actor context in Dependabot auto-merge automation.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 statamic/cms Version ^6.20 | — | — |
moneyphp/money Version ^4.5 | — | — |
stillat/proteus Version ^4.2.1 | — | — |
laravel/framework Version ^12.0 || ^13.0 | — | — |
stripe/stripe-php Version ^16.4 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.