lvntr/laravel-starter-kit
Usable with caveats: it is actively developed, licensed, well documented, and backed by automated checks. The project is young, most recent work comes from one contributor, and it lacks a security policy and explicit workflow permissions, so review upgrades carefully before production use.
72%
Total Score
67
100
94
75
Health Score Breakdown
The repository is owned by an individual user rather than an organization, so the highly concentrated contribution pattern carries more continuity risk.
Two contributors are active, but one accounts for 91% of recent commits, leaving the project dependent on a narrow maintainer base.
The repository has only 9 stars and no forks or watchers; this is limited supporting evidence, but popularity alone does not outweigh the strong recent commit and release activity.
No SECURITY.md or equivalent security policy was found, which weakens the project's disclosed process for receiving and handling vulnerabilities.
The sole workflow has no top-level token permissions declaration, so its permissions are less explicit than recommended even though no write permissions were observed.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 LVNTR |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 dedoc/scramble Version ^0.13.22 | — | — |
lvntr/api-dock Version ~0.0.1 | — | — |
laravel/fortify Version ^1.35 | — | — |
laravel/passport Version ^13.5 | — | — |
nikic/php-parser Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.