jeffersongoncalves/laravel-fake-cartoons
Repository tests, security policy, Dependabot, and recent commits provide useful maintenance coverage. The small contributor base and one high-confidence workflow hygiene warning merit monitoring.
82%
Total Score
80
100
100
83
Health Score Breakdown
A post-autoload-dump script is present, adding install-time execution, but this is a common Composer integration point and no other signal indicates misuse.
Only one registry account has publish access, which limits publishing redundancy, though repository activity shows another active contributor.
The registry namespace and repository are owned by the same individual, so the package has direct ownership continuity but not organization-level handoff capacity.
All four workflows were analyzed, all 15 action references are pinned, and no untrusted checkout or script injection was found. A high-confidence template-injection finding in update-changelog.yml remains a workflow hygiene concern, but no corroborating dangerous trigger was reported.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jefferson Gonçalves |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/framework Version ^12.61.1|^13.12.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.