pancake423/laravel-sfr
The package includes tests, a clear license, and release notes for this version. Its recent release history is positive, but the project remains small and has limited security process.
72%
Total Score
100
88
50
Health Score Breakdown
The package uses a post-autoload-dump install-time lifecycle script. Such a script can run automatically during installation, so it adds some supply-chain exposure even though no malicious behavior is established here.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible adoption lowers confidence in project maturity for a young package.
Composer build tooling is present, but no security scanning tools were detected. This is a modest process gap for a package intended to run in application projects.
The repository has no security policy. That leaves vulnerability-reporting expectations and response procedures unclear, which is a real but not severe transparency gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 William Jackson |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version * | — | — |
illuminate/support Version * | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.