heihallo/mcp-kit
Staff tooling over MCP for Laravel apps: ability catalogue, per-person tokens, access and audit middleware, preview/confirm writes, ground rules, per-user assistant memory and onboarding.
82%
Total Score
healthy
Active, well-documented package with strong release activity, but concentrated ownership and unpinned workflow actions reduce confidence.
Health Score Breakdown
One contributor made 80 of 88 recent commits, creating concentrated ownership. The second active contributor and organization backing partly compensate, but the project remains dependent on a primary maintainer.
Composer build tooling is present, but no security-scanning tools were detected. For a young package this is a modest transparency and maintenance gap.
No repository security policy was found. This does not show a security defect, but it leaves disclosure and maintenance procedures undocumented.
The single workflow was fully analyzed with no untrusted checkouts, script injection, high- or medium-severity findings, and no broad write permissions. However, both of its action references are unpinned, weakening build reproducibility and action-integrity hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 HeiHallo |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/mcp Version ^0.9|^1.0 | — | — |
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/view Version ^12.0|^13.0 | — | — |
laravel/sanctum Version ^4.0 | — | — |
illuminate/console Version ^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.