laravel/mcp
Healthy and suitable to install for Laravel MCP applications. It has frequent releases, active work from many contributors, strong repository hygiene, and organization backing; the only notable caveat is elevated GitHub Actions permissions in several workflows.
93%
Total Score
100
100
100
70
Health Score Breakdown
One of eight workflows uses pull_request_target, which warrants review because that trigger can expose elevated repository context; however, no untrusted checkout or script injection was detected.
A post-autoload-dump install script is present, so installation performs an additional action; this is a modest transparency and supply-chain consideration rather than a severe risk by itself.
All eight workflows declare top-level permissions, but five request write access while only three are read-only; explicit permissions are good hygiene, though the broad write usage increases workflow compromise impact.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Taylor Otwell |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^11.45.3|^12.41.1|^13.0 | — | — |
symfony/process Version ^7.4.5|^8.0.5 | — | — |
illuminate/console Version ^11.45.3|^12.41.1|^13.0 | — | — |
illuminate/routing Version ^11.45.3|^12.41.1|^13.0 | — | — |
illuminate/support Version ^11.45.3|^12.41.1|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.