hardevine/laravel-cloudfront-url-signer
Usable with caveats: it is a small, well-scaffolded Laravel package with tests, documentation, a license, and a matching repository, but the last release was over three years ago. The lack of recent releases and security scanning makes ongoing maintenance less certain.
62%
Total Score
100
83
75
Health Score Breakdown
The package has 12 releases since 2018, but none in the last three years and the latest release was in March 2023. That is a meaningful maintenance concern for a dependency, although the stable 2.3 release and complete project structure provide some reassurance.
The repository reports zero stars, forks, and watchers, offering no community support signal. Popularity is only supporting evidence, so this does not outweigh the package's concrete documentation and tests.
Composer is used for the build, but no security-scanning tooling is reported. This is a modest transparency and maintenance gap, not a severe risk by itself.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. For a package handling URL-signing configuration, this is a genuine but limited concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Paolo Caleffi |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 aws/aws-sdk-php Version ^3.52 | — | — |
illuminate/support Version ^6.0|^7.0|^8.0|^9.0|^10 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.