kirilldakhnyuk/laravel-dead-drop
The repository has tests, a changelog, active recent commits, and a security policy. One publisher and an install-time post-autoload-dump script leave limited operational margin.
68%
Total Score
83
100
94
67
Health Score Breakdown
The package defines a post-autoload-dump install-time script. This adds execution during installation and merits caution even though the signal does not show what the script does.
The repository is owned by an individual rather than an organization, so the single registry publisher and small contributor base provide limited maintenance succession.
The package was released today and has only two releases, issued about 33 minutes apart. This provides too little history to demonstrate sustained maintenance or release stability.
Both workflows were fully audited with no findings, all seven action references are pinned, and no untrusted checkout or script-injection paths were found. One workflow grants top-level write permissions, a mild hygiene concern without an untrusted trigger.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kirill D. |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/bus Version ^12.0||^13.0 | — | — |
laravel/prompts Version ^0.3 | — | — |
illuminate/queue Version ^12.0||^13.0 | — | — |
illuminate/console Version ^12.0||^13.0 | — | — |
illuminate/support Version ^12.0||^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 3 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.