goldenpathdigital/laravel-ascend
Documentation and tests are present, with clear organizational ownership and a security policy. Its single-release history and unpinned workflow actions leave maintenance depth and build reproducibility less proven.
67%
Total Score
100
100
83
100
Health Score Breakdown
This is the only release in nearly 11 months, so there is little release history to demonstrate sustained maintenance or compatibility handling.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and review gap.
Version v0.1.7 is not a stable-major release, which signals an early-stage API and greater potential for breaking changes despite not being marked prerelease.
The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 11 action references are unpinned, which weakens build reproducibility and supply-chain control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Golden Path Digital |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.1 || ^2.0 || ^3.0 | — | — |
symfony/process Version ^5.4 || ^6.0 || ^7.0 | — | — |
nikic/php-parser Version ^4.13 || ^5.0 | — | — |
league/commonmark Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 11 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.