particleacademy/laravel-fun-lab
The repository is active, with 23 commits from two contributors in three months, tests, release notes, and an organization behind it. Workflow references are all unpinned, and one workflow grants top-level write access, adding avoidable release risk.
45%
Total Score
100
100
75
83
Health Score Breakdown
Packagist marks the entire package as abandoned, with no clear replacement; this is a major adoption and maintenance risk despite the active linked repository.
Composer build tooling is present, but no security-scanning tools were detected; the missing scanning is a minor transparency gap rather than a severe risk.
Version v0.4.0 is not a stable major release, which indicates an API may still change, though it is not marked as a prerelease.
The audit completed for both workflows with no high-confidence findings or untrusted checkout paths. However, all four action references are unpinned and one workflow has top-level write permissions, creating avoidable supply-chain and token-scope weaknesses.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Particle Academy |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^6.0|^7.0 | — | — |
illuminate/http Version ^11.0|^12.0 | — | — |
illuminate/events Version ^11.0|^12.0 | — | — |
illuminate/routing Version ^11.0|^12.0 | — | — |
illuminate/support Version ^11.0|^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 9 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.