ghostcompiler/laravel-hetzner-robot
Tests, documentation, licensing, and security reporting are in place, and the repository is backed by an organization. The workflow has no dangerous findings, but both analyzed action references are unpinned.
68%
Total Score
67
94
100
Health Score Breakdown
The package is only 95 days old and has two releases, separated by about 2 days, so its longer-term maintenance record is still limited.
One contributor made all two commits in the last three months. Organization backing provides some handoff capacity, but no second active contributor is shown.
Only two commits were recorded in the last three months, indicating limited demonstrated maintenance activity for a package with only two releases.
The single workflow was fully analyzed with no dangerous audit findings or untrusted checkout and script-injection paths. However, both analyzed action references are unpinned, leaving a supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ghost Compiler |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/contracts Version ^11.0 || ^12.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.