Package Health/octomated/laravel-vcom-api

octomated/laravel-vcom-api

The MIT license, clear README, changelog, repository tests, and organization backing support routine adoption. Its small dependency footprint and matching repository improve transparency, though consumers should expect a young pre-1.0 API.

Latest 0.3.0

Packagist

62%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only three releases and none in the last 12 months; its latest registry release was about 16 months ago. The repository was pushed more recently, which partly offsets but does not remove the release-cadence concern.

Security policy

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a modest transparency gap for a package handling external API credentials.

Version stability

Version 0.3.0 is not a stable major release, so its API may still change. It is not marked as a prerelease, which provides some compensation for production use.

Workflow audit

All 12 action references are unpinned, and three workflows grant top-level write permissions. The high-confidence bot-conditions finding in the Dependabot auto-merge workflow adds workflow hygiene concern, although no untrusted checkout or script injection was detected.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Octomated GmbH

Direct Dependencies

Dependency	Last Release	Score
illuminate/console Version ^12.0	—	—
illuminate/support Version ^12.0	—	—
illuminate/contracts Version ^12.0	—	—
meteocontrol/vcom-api-client Version ^3	—	—
spatie/laravel-package-tools Version ^1.14	—	—