Package Health/jkudish/laravel-ai-pricing

jkudish/laravel-ai-pricing

Clear documentation, a matching repository, and an MIT license make adoption straightforward. Automated security tooling and two active contributors provide useful maintenance coverage, though install-time scripting and unpinned workflow actions warrant routine review.

Latest v0.2.1

Packagist

84%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package declares a post-autoload-dump install-time script, which adds execution during Composer operations. No provided signal shows that this script is harmful, so this is a limited supply-chain hygiene concern.

Project backing

The registry namespace and repository are owned by the same individual, so the package has clear ownership but no organizational backing indicated. The second active contributor partly offsets that limitation.

Version stability

Version v0.2.1 is not a stable major release, so its API may still change. It is not marked as a prerelease, reducing the concern somewhat.

Workflow audit

All three workflows were analyzed with no audit findings or untrusted checkouts. However, all eight action references are unpinned and one workflow grants top-level write access; these are hygiene concerns without a demonstrated dangerous sink.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Joey Kudish

Direct Dependencies

Dependency	Last Release	Score
brick/math Version ^0.14.2 \|\| ^0.15 \|\| ^0.16 \|\| ^0.17 \|\| ^0.18 \|\| ^0.19 \|\| ^0.20 \|\| ^1.0	—	—
illuminate/http Version ^12.0\|\|^13.0	—	—
illuminate/cache Version ^12.0\|\|^13.0	—	—
illuminate/console Version ^12.0\|\|^13.0	—	—
illuminate/support Version ^12.0\|\|^13.0	—	—