Package Health

fidum/padlock

A Laravel Zero Command for encrypting and decrypting environment files.

Latest 4.0.0PackagistPackagist

63%

Total Score

caution

Usable with caveats: no release in 16 months and GitHub workflows have high-risk hygiene gaps.

Health Score Breakdown

Release historycaution

The package has six releases over about 3 years, but there have been no registry releases in the last 16 months. This indicates a slower maintenance cycle and raises abandonment risk without proving abandonment.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last 3 months. Although the repository was pushed recently and the release is stable, the observed short-term activity is weak.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though dependency scanning through Dependabot partially offsets the concern.

Workflow auditcaution

All 10 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no reported untrusted checkout or script-injection sink, limiting this to a workflow hygiene caution.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Daniel Mason

Direct Dependencies

DependencyLast ReleaseScore
nunomaduro/termwind
Version ^2.3
—
—
illuminate/encryption
Version ^12.0
—
—
laravel-zero/phar-updater
Version ^1.4
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform