jeffersongoncalves/laravel-favicon-proxy
The repository includes tests, a changelog, security policy, and active recent commits. The single published release and broad permission in one workflow leave modest uncertainty about long-term maintenance.
82%
Total Score
88
100
94
75
Health Score Breakdown
The package runs a post-autoload-dump lifecycle script, which adds install-time behavior and warrants some caution even though no dangerous action is shown here.
The registry lists one publisher, which limits publishing redundancy, but the repository shows a second active contributor and recent project activity.
Only one release has been published, about 96 days after the first release, so there is limited evidence of release stability over time.
All four workflows were analyzed successfully, all 11 action references are pinned, and no dangerous audit findings were reported. One workflow has top-level write permissions, which is a mild hygiene concern without an untrusted trigger or sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jefferson Gonçalves |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^11.0|^12.0|^13.0 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
illuminate/routing Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.