Package Health/n3xt0r/laravel-webdav-server

n3xt0r/laravel-webdav-server

The repository has had no commits for about three months, and its workflows use broad write permissions with six unpinned actions. Documentation, licensing, tests in the repository, security scanning, and a release note for this version provide useful support, but the project is still young.

Latest 1.0.0

Packagist

63%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual user rather than an organization, so there is no visible organizational backing to offset the thin maintenance record.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. That is a meaningful maintenance concern, although the package has a short release history and was pushed in early July.

Security policy

The repository has no security policy. For a package implementing authentication and a network-facing WebDAV server, that leaves vulnerability reporting and handling less transparent.

Version stability

Version 1.0.0 is a stable major release, but 87.5% of recent releases were prereleases, so the project's stable-release track has limited history.

Workflow audit

All six analyzed action references are unpinned, and all three workflows grant top-level write permissions. The audit also found a high-confidence bot-condition issue in the Dependabot auto-merge workflow; the pull_request_target trigger had no untrusted checkout or script-injection sink.