php-opcua/laravel-opcua

The package includes tests, a changelog, release notes, a security policy, and a clearly matching organization-owned repository. Its GitHub Actions use unpinned actions and contain high-confidence workflow findings, so releases should be watched closely.

Latest v4.4.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

Only one commit from one active maintainer was recorded in the last 3 months, which is thin maintenance evidence despite the recent release.

Repo popularity

The repository has 6 stars and 1 fork, which is limited adoption evidence, but popularity is only supporting context and does not outweigh its active release history and organization backing.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in automated security hygiene.

Workflow audit

All three workflows were analyzed without audit failures, but all 12 action references are unpinned. The audit also reported high-confidence template injection and github-app findings, making workflow hygiene a real supply-chain concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

GianfriAur

Direct Dependencies

Dependency	Last Release	Score
illuminate/console Version ^11.0\|^12.0\|^13.0	—	—
illuminate/support Version ^11.0\|^12.0\|^13.0	—	—
illuminate/contracts Version ^11.0\|^12.0\|^13.0	—	—
psr/event-dispatcher Version ^1.0	—	—
php-opcua/opcua-client Version ^4.4.0	—	—