fab120/valet
The package includes clear documentation, tests and a changelog in its repository, with an explicit MIT license and security policy. Its six unpinned Actions references and lack of security scanning add hygiene risk.
58%
Total Score
50
86
100
Health Score Breakdown
The package has 145 releases since November 2020, but none in the last 12 months and its latest release was nearly three years ago, indicating substantial maintenance slowdown.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
Composer is used for builds, but no repository security-scanning tools were detected, leaving a modest transparency and maintenance gap.
All six analyzed Actions references are unpinned, which weakens workflow reproducibility. One pull_request_target trigger and two workflows with top-level write permissions were found, but there were no untrusted checkouts, script injection findings, or audit findings, so this is a hygiene caution rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Fabio Cagliero |
| Taylor Otwell |
| Adam Wathan |
| Matt Stauffer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mnapoli/silly Version ^1.5 | — | — |
symfony/console Version ^3.0|^4.0|^5.0|^6.0 | — | — |
symfony/process Version ^3.0|^4.0|^5.0|^6.0 | — | — |
guzzlehttp/guzzle Version ^6.0|^7.4 | — | — |
illuminate/container Version ~5.1|^6.0|^7.0|^8.0|^9.0|^10.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.