Package Health

edulazaro/larablog

Markdown blogs for Laravel in several languages, each with its own URL: one folder per post, one file per language, hreflang, feeds, sitemap and social cards included

Latest 1.0.2PackagistPackagist

78%

Total Score

healthy

A very new, actively published package with solid documentation and tests, but limited history and modest workflow hygiene.

Health Score Breakdown

Release historycaution

The package is only 4 days old but already has 3 releases, with a median interval of about 2 days; this shows active initial publishing but provides little long-term evidence.

Repo commit activitycaution

There were no commits in the last 3 months and no active maintainers in that window, but the package is only 4 days old and the repository was pushed recently, so this is weak long-term evidence rather than abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected; this is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, limiting published guidance for reporting vulnerabilities, though this is not evidence of unsafe code by itself.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Both action references are unpinned, which is a mild reproducibility and supply-chain hygiene concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Edu Lazaro

Direct Dependencies

DependencyLast ReleaseScore
symfony/yaml
Version ^7.0|^8.0
—
—
laravel/framework
Version >=11.0
—
—
league/commonmark
Version ^2.4
—
—
edulazaro/laracards
Version ^1.1
—
—

Weekly Downloads

Info

Last Published
8 days ago
Created
9 days ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform