kodefarmers/laravel-cadence
The package is very new, and its repository has no security policy or automated security scanning. Its README, tests, release notes, licensing, and organization backing provide useful transparency, while the workflows complete cleanly despite using six unpinned actions.
68%
Total Score
83
100
88
50
Health Score Breakdown
A post-autoload-dump install-time script runs during installation, adding some supply-chain and installation complexity even though no dangerous behavior is shown here.
The package is only 63 days old with two releases, so its maintenance track record is still limited, although the releases are close together rather than showing abandonment.
All 66 recent commits came from one contributor, creating a meaningful continuity risk; organization ownership provides some ability to hand maintenance off but does not demonstrate a second active contributor.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.
The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Shivaji Chalise |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 2 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.