mathiasonea/laravel-rulebook
The package is clearly documented, licensed, and backed by repository tests and release notes. Workflow permissions are broad and references are unpinned, so pinning this version and reviewing CI changes is prudent.
68%
Total Score
75
83
100
Health Score Breakdown
The package is only 62 days old, with seven releases and a median interval of about 16 hours. This shows active early development but gives limited evidence of long-term stability.
One contributor made all 17 commits in the last three months, creating a concentrated maintenance dependency. The linked repository is user-owned rather than organization-owned, so there is no shown organizational handoff buffer.
Version v0.2.1 is a non-prerelease release, but the package remains before 1.0. That signals an API that may still change materially.
All three workflows were analyzed without high-confidence audit findings, untrusted checkouts, or script injection. However, two workflows grant top-level write access and all 11 action references are unpinned, leaving avoidable CI supply-chain and permission-hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mathias Onea |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 2 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.