oneofftech/laravel-connect-identity
The package includes tests, a clear README, MIT licensing, and a security policy. Its small project footprint and weak workflow pinning leave less margin for changes and reproducible builds.
61%
Total Score
75
86
100
Health Score Breakdown
The package has 10 releases over roughly six years, but none in the past year; the latest was published on August 3, 2025. This indicates a meaningful maintenance slowdown, though the release history is established.
The repository recorded no commits and no active maintainers in the past three months. That weakens evidence of ongoing maintenance, although the latest release shows the project was updated more recently.
The repository has 1 star, 0 forks, and 1 watcher, so there is little visible community adoption or outside review. Popularity is supporting evidence rather than a requirement, but this provides little maintenance reassurance.
All 6 analyzed action references are unpinned, and one workflow grants top-level write permissions. No untrusted triggers, checkout paths, or script-injection findings were detected, so this is workflow hygiene caution rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alessio |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/auth Version ^11.0|^12.0 | — | — |
illuminate/view Version ^11.0|^12.0 | — | — |
laravel/socialite Version ^5.0 | — | — |
illuminate/console Version ^11.0|^12.0 | — | — |
illuminate/support Version ^11.0|^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.