ghostcompiler/laravel-uploads
Clear documentation, tests, changelog, MIT licensing, and a security policy make integration straightforward. Composer dependencies are limited, and organization backing helps offset the single-contributor maintenance risk, but the project remains early-stage.
62%
Total Score
67
100
88
100
Health Score Breakdown
The package is only 105 days old with three releases, and its latest release was about 3 months ago; this is limited evidence of long-term maintenance.
One contributor made all commits in the last 3 months, creating concentrated maintenance risk; organization ownership provides some handoff capacity but no second active contributor is shown.
Only one commit was recorded in the last 3 months, indicating weak recent maintenance momentum.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest project-hygiene gap.
Both workflows were fully analyzed with no dangerous sinks or audit findings, but all four action references are unpinned and one workflow grants top-level write access, creating a workflow-hygiene caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ghost Compiler |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 4 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.