padosoft/laravel-ai-guardrails
Clear documentation, a full test suite, and an Apache-2.0 license support dependable adoption. The small two-person maintainer base and unpinned workflow actions merit ongoing attention.
82%
Total Score
88
100
93
67
Health Score Breakdown
Two contributors are active, with the top contributor responsible for about 54% of recent commits. The near-even split reduces concentration risk, though the overall contributor base remains small.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest assurance gap, partially offset by the documented test suite and active repository work.
The repository has no SECURITY.md or other detected security policy. For a package focused on prompt-injection guardrails, this is a transparency gap for reporting and handling vulnerabilities.
All 3 workflows were analyzed with no untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned and the release workflow grants top-level write access, creating reproducibility and token-scope hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/ai Version ^0.8|^0.9|^0.10|^0.11 | — | — |
illuminate/console Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
illuminate/contracts Version ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 26 days ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.