laravel/wayfinder

Healthy and suitable to use, with the normal caveat that it is still a beta 0.x release whose API may change. Recent releases, active contributions from five maintainers, tests, release notes, and repository security tooling provide strong maintenance and transparency evidence.

Latest v0.1.21

Packagist

90%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Dangerous workflows

One workflow uses pull_request_target, which can require extra care, but there are no untrusted checkouts or script-injection findings across the five analyzed workflows.

Lifecycle scripts

The package uses a post-autoload-dump lifecycle script, which is relevant install-time behavior and warrants review, but this is a normal Composer integration point rather than evidence of poor package health on its own.

Token permissions

All five workflows declare top-level permissions; two are read-only, while three request write access, so the permissions posture is transparent but not uniformly minimized.

Version stability

Version 0.1.21 is not a stable major release, so its API may still change; the release is not marked prerelease and recent prerelease share is 0%.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Taylor Otwell

Direct Dependencies

Dependency	Last Release	Score
illuminate/console Version ^11.0\|^12.0\|^13.0	—	—
illuminate/routing Version ^11.0\|^12.0\|^13.0	—	—
illuminate/support Version ^11.0\|^12.0\|^13.0	—	—
illuminate/filesystem Version ^11.0\|^12.0\|^13.0	—	—
phpstan/phpdoc-parser Version ^2.3	—	—