pietervanleuven/laravel-mcp-discovery
Clear documentation, tests, licensing, and two active contributors improve the outlook. Pin carefully while the project is new and its automation remains broadly permissive.
62%
Total Score
100
100
88
75
Health Score Breakdown
This is the package's first release, published less than a day ago, so there is no established release track record or demonstrated long-term maintenance.
Version 0.1.0 is explicitly an early, non-stable major version, so APIs and behavior may change while the project matures.
All 12 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script-injection sink was found, so this is a hygiene and automation risk rather than a standalone severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Pieter Van Leuven |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/mcp Version ^1.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 1 day ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.