guanguans/laravel-api-response
Ten releases in the last year, a current stable major version, and an active repository show sustained maintenance. Workflow permissions, unpinned actions, and install-time scripts deserve extra review despite the project’s tests, release notes, security policy, and scanning tools.
78%
Total Score
100
100
100
75
Health Score Breakdown
The package declares post-autoload-dump, post-install-cmd, and post-update-cmd scripts, so installation can execute package-defined commands. This is a supply-chain hygiene concern, although the available signals do not show those scripts are harmful.
All seven workflows were analyzed, but all 17 action references are unpinned, two workflows grant top-level write permissions, and the audit found a high-confidence bot-conditions issue plus an adhoc package install. No untrusted checkout or script injection was found, so this is a hygiene concern rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 guanguans |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/framework Version ^11.56 || ^12.0 || ^13.0 | — | — |
spatie/laravel-package-tools Version ^1.93 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.