glhd/laravel-dumper

Clear documentation, tests, licensing, and a recent release make the package straightforward to evaluate. Security scanning is absent, and the workflows use unpinned actions, including one archived action.

Latest 3.0.1

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last 3 months. The recent release partly offsets this, but the current lack of source activity is a maintenance concern.

Repo issue activity

There is only one open issue and one open pull request, with no new or closed issues or pull requests in the last month; this is limited activity but not evidence of abandonment by itself.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a project security-hygiene gap.

Security policy

The repository has no security policy, reducing the transparency of its vulnerability-reporting process, though this is a documentation gap rather than a severe dependency risk.

Workflow audit

All four workflows were analyzed successfully and have no untrusted checkouts or script injection, but all 13 action references are unpinned and one high-confidence medium-severity finding uses an archived action. These weaken build reproducibility and workflow maintenance.