innoge/laravel-policy-soft-cache
The package is licensed, documented, and backed by a matching repository with tests and release notes. Its workflows use 11 unpinned actions, and the repository has no security policy, adding build and maintenance concerns.
67%
Total Score
75
100
93
50
Health Score Breakdown
The package runs a post-autoload-dump install-time script. This is common in Composer packages, but it adds install behavior that dependents should account for.
The package has been maintained since November 2022 with 12 releases, but only one release appeared in the last 12 months, indicating a slower release pace.
The repository shows no commits and no active maintainers in the last three months, which is a meaningful sign of reduced recent maintenance activity.
The linked repository has no security policy. This does not show a security defect, but it leaves vulnerability reporting and response expectations undocumented.
All four workflows were analyzed successfully with no dangerous audit findings or untrusted checkouts, but all 11 action references are unpinned, weakening build reproducibility and update control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tim Geisendörfer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.