oltrematica/laravel-pulse-mail
Documentation, licensing, and repository ownership are in good shape. Maintenance has gone quiet recently, while the workflow audit found a high-confidence bot-condition problem and all 12 actions are unpinned.
62%
Total Score
75
90
50
Health Score Breakdown
The audit found a high-confidence, high-severity bot-conditions issue in the Dependabot auto-merge workflow. All 12 analyzed action references are unpinned, and three workflows grant top-level write permissions, adding supply-chain hygiene risk even though no untrusted checkout or script injection was found.
The package uses a post-autoload-dump install-time script. This is a meaningful execution surface, but the signal provides no evidence that the script is unsafe.
The repository recorded zero commits and zero active maintainers in the last three months, indicating recently limited maintenance activity despite a recent release and push date.
The repository has no SECURITY.md or other security policy, reducing transparency for reporting and handling vulnerabilities.
v0.2.0 is not marked as a prerelease, but the 0.x major version signals an immature compatibility surface compared with a stable 1.x release.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mircha Emanuel D'Angelo |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/pulse Version ^1.0 | — | — |
livewire/livewire Version ^3.0|^4.0 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.