maantje/xhprof-buggregator-laravel
The package includes repository tests, a matching README, release notes, and Dependabot scanning. A missing security policy and weak workflow pinning add maintenance and automation risk.
62%
Total Score
50
88
50
Health Score Breakdown
The package is about three years old with 10 releases, but only one release in the last 12 months. That suggests slower maintenance, though the latest release is recent enough to avoid an abandonment conclusion.
The repository recorded no commits and no active maintainers in the last three months. A recent release provides some compensation, but current maintenance activity is weak.
The repository has no security policy. This limits transparency around vulnerability reporting, although Dependabot scanning provides some compensating security practice.
All 9 analyzed action references are unpinned, and two workflows grant top-level write permissions. The audit also reports high-confidence bot-condition and template-injection findings, but no untrusted checkout or script-injection sink was found, so these are workflow hygiene concerns rather than severe supply-chain evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jamie Schouten |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^10.0|^11.0|^12.0|^13.0 | — | — |
spiral-packages/profiler Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.