iak/action
Simple actions for Laravel
68%
Total Score
caution
Active maintenance is offset by a high-confidence workflow flaw, broad write tokens, and unpinned actions.
Health Score Breakdown
The package defines a post-autoload-dump install-time script. Lifecycle execution deserves review because it runs during installation, though this signal alone does not establish harmful behavior.
No repository security policy was found, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is not evidence that the package is unsafe.
All 12 analyzed action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script injection was found, but the automation needs hardening.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Isak Berglind |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^2.72.2||^3.0 | — | — |
monolog/monolog Version ^3.0 | — | — |
illuminate/console Version ^11.0||^12.0 | — | — |
illuminate/support Version ^11.23||^12.0 | — | — |
illuminate/database Version ^11.0||^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.