michal78/laravel-pandora
The MIT license, security policy, tests, and release notes make the package transparent to evaluate. Its small two-person contributor base is balanced, but the 0.x API remains subject to change.
72%
Total Score
75
86
100
Health Score Breakdown
Five releases in 37 days show strong early momentum, but the package is still very young, so long-term maintenance is not yet established.
Two contributors are active and contribution is nearly evenly split, which is better than single-person concentration, though the overall maintainer base remains small.
The current v0.1.4 release is not a prerelease, but the 0.x major version signals an immature API that may change incompatibly.
All four workflows were analyzed with no reported audit findings or unsafe untrusted checkouts, but all 14 action references are unpinned and one workflow grants top-level write access.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/uid Version ^7.0|^8.0 | — | — |
illuminate/bus Version ^13.0 | — | — |
illuminate/queue Version ^13.0 | — | — |
illuminate/events Version ^13.0 | — | — |
illuminate/console Version ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.