jayanta/laravel-threat-detection
Clear documentation, repository tests, security policy, and active tooling support adoption. Pinning all ten workflow actions and note that one contributor made 90% of recent commits.
78%
Total Score
67
100
83
Health Score Breakdown
The repository is user-owned rather than organization-owned, so the concentrated contributor activity provides less documented handoff capacity.
One contributor made about 90% of the 63 recent commits, leaving maintenance capacity concentrated despite two additional contributors.
The single workflow was fully analyzed with no untrusted checkout, injection, or high-confidence audit findings, but all 10 action references are unpinned, weakening build reproducibility.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-492386 jayanta/laravel-threat-detection is vulnerable to Cleartext Storage of Sensitive Information in versions 0.0.1 - 1.7.2. | 0.0.1 - 1.7.2 | Medium |
Package versions
Maintainers
 Jay Anta |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/bus Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/cache Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/queue Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/events Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 6 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.