martin-ro/laravel-herdr
The repository includes tests, a substantial README, and a clear license. The workflow uses two unpinned actions, and there is no security policy or security scanning; the young release history also leaves less evidence of long-term stability.
77%
Total Score
100
100
79
83
Health Score Breakdown
The package is only 50 days old and has two releases, with the latest release on the initial publication date; this provides limited evidence of sustained release maturity.
Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance gap for a new package.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Version v0.2.0 is a non-stable-major release, so the public API may still change even though it is not marked as a prerelease.
The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but both action references are unpinned. The absence of a top-level permissions block is acceptable on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Martin Roph |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/contracts Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.