gts-meghni/laravel-satim

Two contributors are active, security tooling and a security policy are present, and the workflows are fully audited with pinned actions. The single broad write permission is a minor hygiene concern without an untrusted trigger or injection finding.

Latest v1.1.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

A post-autoload-dump install lifecycle script is present, creating some execution surface during installation. No accompanying signal shows that it is unsafe, so this is only a minor consideration.

Project backing

The repository is owned by a user account rather than an organization, so the small active contributor base offers limited visible institutional backing.

Release history

The package is only 39 days old with two releases, so its long-term maintenance record is still unproven. The latest release was recent and the repository shows activity, which partly offsets the limited history.

Repo bus factor

Two contributors are active, with the leading contributor responsible for two of three recent commits. The second contributor provides some handoff capacity, but the base remains small.

Workflow audit

Both workflows were analyzed successfully, all five action references are pinned, and no injection or untrusted-checkout findings were reported. One workflow grants top-level write permission, a mild hygiene concern without an unsafe trigger or sink.