goldnead/statamic-leadhub
This is a young but actively maintained and transparently published package with 45 releases in 124 days, a stable non-prerelease version, recent repository activity, a matching source repository, and substantial documentation and source scaffolding. The repository contains tests and CI even though tests are not included in the artifact, and the two contributors have both been active recently, reducing single-maintainer risk. The main reservations are the absence of a security policy and explicit GitHub Actions token permissions, no security scanning tooling, zero repository popularity metrics, and the package's proprietary license, although a LICENSE file is present. Overall, it appears suitable to depend on, subject to normal vendor and upgrade review.
86%
Total Score
90
100
89
80
Health Score Breakdown
The repository is owned by the user account goldnead rather than an organization. This does not invalidate the package, but it means there is no organization-level backing to offset the small maintainer base.
The repository has zero stars, forks, and watchers. This provides no external adoption evidence, but popularity is supporting evidence only and is outweighed here by strong release and commit activity.
Composer build tooling is present, but no security scanning tools were detected. The build setup is appropriate, while the missing security automation is a modest hygiene gap.
The repository has no SECURITY.md or other declared security policy. This weakens vulnerability-reporting transparency, although it is a process gap rather than evidence that the package is unsafe.
Both workflows lack top-level token permissions declarations. No workflow requests top-level write access, but explicit least-privilege permissions would provide stronger CI security hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Adrian Goldner |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 statamic/cms Version ^6.0 | — | — |
symfony/yaml Version ^6.0|^7.0|^8.0 | — | — |
laravel/framework Version ^12.0|^13.0 | — | — |
inertiajs/inertia-laravel Version ^1.0|^2.0 | — | — |
goldnead/statamic-brand-context Version ^1.13 | — | — |
Weekly Downloads
Info
- Last Published
- 13 days ago
- Created
- 4 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.