lsnepomuceno/laravel-autentique
The package is well documented, licensed, and backed by repository tests, releases, and security tooling. Its maintenance history is too short to establish durability, and all 10 workflow actions are unpinned.
62%
Total Score
67
94
83
Health Score Breakdown
The package and repository are owned by the same individual account. This is coherent ownership, but it does not provide organizational backing or a broader maintenance base.
The package is 0 days old with only 2 releases, so there is not yet enough history to demonstrate sustained maintenance or compatibility over time.
The repository records 0 commits and 0 active maintainers in the last 3 months. This conflicts with the recent issue and pull-request activity and leaves long-term maintenance capacity unproven.
All 10 analyzed action references are unpinned, which weakens build reproducibility. The audit also reported a low-confidence cache-poisoning finding; because it is low confidence, it is a hygiene concern rather than a severe risk, while all workflows use read-only permissions and no untrusted checkout or script-injection paths were found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Lucas Nepomuceno |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^3 | — | — |
illuminate/http Version ^13 | — | — |
illuminate/console Version ^13 | — | — |
illuminate/routing Version ^13 | — | — |
illuminate/support Version ^13 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 4 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.