jatniel/laravel-pexels
The package is well documented, licensed, and backed by tests, a changelog, and release notes. Its maintenance record is not yet established, while CI uses broad permissions and entirely unpinned actions.
61%
Total Score
50
94
50
Health Score Breakdown
This is the package's first release, published today, so there is no release track record or established cadence yet. Its repository is active at publication time, which softens but does not remove the uncertainty.
The repository has recorded 0 commits and 0 active maintainers in the last 3 months. Because the package is only 0 days old, this reflects limited history rather than clear abandonment, but sustained maintenance is unproven.
All 12 analyzed action references are unpinned, and 3 of 5 workflows grant top-level write permissions. The high-confidence bot-conditions finding in the pull_request_target workflow adds workflow hygiene risk, although no untrusted checkout or script-injection sink was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jatniel Guzmán |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 6 hours ago
- Created
- 6 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.