lunarstorm/laravel-ddd
Recent releases and active work from three contributors support continued maintenance. Workflow checks still need attention, especially the high-confidence Dependabot condition issue and fully unpinned actions.
58%
Total Score
100
88
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no distinct replacement, which is a substantial adoption and support risk despite the repository remaining active.
A post-autoload-dump lifecycle script is present; this is a normal Composer integration mechanism for a Laravel package, but it adds install-time execution surface.
The repository has no security policy, leaving vulnerability reporting and handling less transparent for consumers.
All 25 analyzed action references are unpinned, and a high-confidence bot-conditions finding reports a potentially spoofable actor check in the Dependabot auto-merge workflow; the pull_request_target trigger has no untrusted checkout or script-injection sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jasper Tey |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/pint Version ^1.21 | — | — |
symfony/finder Version ^7.0|^8.0 | — | — |
laravel/prompts Version ^0.3.1 | — | — |
lorisleiva/lody Version ^0.6|^0.7 | — | — |
illuminate/contracts Version ^11.44|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.