ensi/laravel-auditing

Tests, a clear MIT license, and a security policy improve confidence in the project's structure. Pin version 0.4.6 and verify compatibility with your Laravel version before adopting it.

Latest 0.4.6

Packagist

63%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has existed for about 5 years, with 20 releases and 2 releases in the last 12 months, but the latest release was about 8 months ago. This suggests slowed rather than fully abandoned maintenance.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. This is a meaningful maintenance concern, especially alongside the older latest push, but not by itself proof of abandonment.

Repo popularity

The repository has 4 stars and 4 forks, indicating a small user and contributor footprint. Low popularity is supporting caution rather than a verdict because the project has tests and organizational backing.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Workflow audit

Both workflows were analyzed successfully with no untrusted checkout or script-injection findings, but all 4 action references are unpinned and a high-confidence unpinned container image finding was reported. This weakens CI supply-chain hygiene without making the release unfit on its own.