jeffersongoncalves/laravel-github-readme
Clear licensing, release notes, and active repository work add useful confidence. The workflow audit found a high-confidence template-injection pattern, so inspect that changelog workflow before relying on automated releases.
82%
Total Score
83
100
100
67
Health Score Breakdown
A post-autoload-dump install script runs during Composer installation. This is a supply-chain-relevant execution point, although the signal provides no evidence that the script is unsafe.
Only one account has registry publish access, which creates publishing concentration; repository activity from a second contributor partly offsets that concern.
All four workflows were analyzed, references are fully pinned, and no untrusted checkout or script injection was found. A high-confidence template-injection finding in update-changelog.yml remains a workflow hygiene concern, but no dangerous trigger or sink was corroborated.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jefferson Gonçalves |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 league/commonmark Version ^2.8.2 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.14 | — | — |
Weekly Downloads
Info
- Last Published
- 13 days ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.