foxws/laravel-media
The repository is active, documented, tested, and backed by two recent contributors. Its one-day history and install-time script leave limited evidence of long-term stability, so pinning this exact version is sensible.
72%
Total Score
100
100
86
67
Health Score Breakdown
A post-autoload-dump install-time script is present. This is not inherently unsafe, but it adds installation behavior that consumers should understand in a very new package.
The package is only 1 day old, despite 9 releases and a median interval of about 36 minutes; this shows activity but provides little evidence of sustained maintenance.
Version 0.3.4 is not a prerelease, which is positive, but the package remains below 1.0 and has very limited release history.
Both workflows were fully audited with no findings, all 5 action references are pinned, and no untrusted checkout or script-injection paths were detected. One workflow has top-level write permissions, which is a mild hygiene concern without an untrusted trigger or sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 foxws |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0 | — | — |
illuminate/bus Version ^13.0 | — | — |
symfony/process Version ^7.4 || ^8.0 | — | — |
illuminate/console Version ^13.0 | — | — |
illuminate/process Version ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 19 hours ago
- Created
- 2 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.