jvjvjv/code-talker
Multi-provider AI communications package for Laravel — chatbots, streaming, tool-use, memory, and admin management.
82%
Total Score
healthy
Frequent releases and recent commits show an active, maintained package despite unpinned workflow actions.
Health Score Breakdown
No security policy was found in the repository. This is a transparency gap for a package handling AI credentials and conversation data, though it does not by itself indicate abandonment.
Version v0.18.0 is not a stable major release, but it is not marked as a prerelease and recent releases contain no prerelease versions. This is a modest maturity limitation rather than a serious concern.
The sole workflow was fully analyzed with no untrusted checkout, script injection, or high-confidence audit findings, and it does not use broad top-level write permissions. However, all four action references are unpinned, leaving avoidable build-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jason Vertucio |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/ai Version ^0.9 | — | — |
laravel/mcp Version ^0.8.1 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
laravel/framework Version ^12.62 || ^13.15 | — | — |
symfony/dom-crawler Version ^7.4 || ^8.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 4 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.