Package Health

lukeraymonddowning/laravel-template

The package includes a readable setup guide, tests, and release notes for this version. Its workflow uses read-only permissions, but action references are unpinned and no security scanning is configured.

Latest v2.0.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

86

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Release historycaution

The package has had no releases in the last 12 months, and its latest release was more than three years ago. Its nine releases were previously regular, but the current inactivity lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating little current maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance weakness, though it is not by itself evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The workflow was fully analyzed and uses read-only permissions, with no audit findings or untrusted checkout sinks. However, both action references are unpinned, which leaves the build dependent on mutable external action versions.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
laravel/tinker
Version ^2.8
—
—
laravel/sanctum
Version ^3.2
—
—
guzzlehttp/guzzle
Version ^7.5
—
—
laravel/framework
Version ^10.0
—
—
thecodingmachine/safe
Version ^2.4
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform