lenorix/fluentizy-laravel-tools
The package includes tests, a changelog, a clear license, and only three runtime dependencies. Organization backing and a matching repository improve traceability, but the project lacks a security policy and its workflow setup needs attention.
58%
Total Score
75
100
94
25
Health Score Breakdown
The audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow, and all nine analyzed action references are unpinned. Two workflows also grant top-level write permissions, increasing maintenance and workflow-hygiene risk.
All five releases arrived within about three days, with no later registry release during the package's roughly ten-month lifetime. That concentrated history provides limited evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, weakening confidence that issues and compatibility changes will be addressed promptly.
The linked repository has no security policy. This is a transparency gap for reporting vulnerabilities, although the repository does use Dependabot for security scanning.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jesus Hernandez |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^10.0||^11.0||^12.0 | — | — |
spatie/laravel-package-tools Version ^1.92 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 9 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.