n3xt0r/dashclip-delivery
It also has frequent releases, substantial recent commits, and a matching repository with tests. One registry maintainer, broad workflow permissions, and no security policy reduce ownership and operational transparency.
71%
Total Score
67
50
94
50
Health Score Breakdown
The release declares 24 runtime dependencies, including framework, storage, media-processing, and authentication components; this broad dependency surface increases maintenance and update burden.
The artifact contains an AGPL-3.0 license, but the manifest also declares proprietary terms; that mismatch creates avoidable licensing uncertainty.
Four Composer lifecycle scripts run during installation or updates. These are operationally sensitive and add supply-chain exposure, although their presence alone does not show harmful behavior.
The repository is owned by an individual account rather than an organization, so the small maintainer base and concentrated activity are less buffered by formal project backing.
Two contributors are active, but the top contributor accounts for about 63% of recent commits and the repository is user-owned, leaving a meaningful concentration risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ilya Beliaev |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/reverb Version ^1.0 | — | — |
laravel/tinker Version ^3.0.0 | — | — |
laravel/horizon Version ^5.45 | — | — |
laravel/passport Version ~13.7.3 | — | — |
filament/filament Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.