jeffersongoncalves/filakit-cli
CLI tool for scaffolding Laravel projects with Filakit starter kits.
76%
Total Score
healthy
Active releases and a matching repository support adoption, but a high-confidence workflow finding and broad write permissions lower confidence.
Health Score Breakdown
Only one registry account has publish access. The repository shows two active contributors, which provides some compensation but does not remove single-publisher risk.
The repository is owned by an individual user rather than an organization, so the single registry maintainer and two-person contributor base provide limited organizational continuity.
The repository has no security policy. This is a transparency gap for reporting vulnerabilities, although active development and Dependabot provide some compensation.
All five workflows were analyzed and all 14 action references are pinned, but four workflows grant top-level write permissions and a high-confidence bot-conditions finding may allow actor context to be spoofed. The workflow issue is a real supply-chain hygiene concern, though no untrusted checkout or script-injection sink was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jefferson Goncalves |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/installer Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 7 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.