jeffersongoncalves/nativekit
NativeKit starter kit built on Laravel 13.x, Filament 3.x and NativePHP for native desktop applications.
79%
Total Score
healthy
Active maintenance and solid project hygiene outweigh one high-confidence workflow audit concern.
Health Score Breakdown
The package declares four lifecycle scripts, including post-update and post-create-project hooks; these add installation complexity and warrant attention, though they are common in Laravel application scaffolding.
The repository is owned by an individual rather than an organization, so maintenance depends on a relatively small personal project base; recent activity partly offsets that limitation.
Two contributors are active, and the leading contributor accounts for about 58% of recent commits; this is somewhat concentrated but not a single-maintainer pattern.
All six workflows were analyzed with no unpinned actions, untrusted checkouts, or script injections, but a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow and top-level write permissions appear in three workflows.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/tinker Version ^3.0 | — | — |
filament/filament Version ^3.3 | — | — |
guzzlehttp/guzzle Version ^8.1.0 | — | — |
laravel/framework Version ^13.0 | — | — |
livewire/livewire Version ^3.6 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.