pixelworxio/laravel-ai-action
Healthy and suitable to use, with strong recent releases, active repository work, tests, documentation, and a matching source project. Review its GitHub workflow permissions and the absence of a security policy before adopting it in a sensitive environment.
88%
Total Score
100
100
100
70
Health Score Breakdown
One of four workflows uses pull_request_target for Dependabot auto-merge, which requires careful review because that trigger has elevated trust; no untrusted checkouts or script-injection findings were detected.
The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear despite the presence of Dependabot.
Two workflows lack top-level permissions and two declare top-level write access, including auto-merge and changelog automation; the permissions posture is less restrictive than ideal.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 @whoisthisstud |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/ai Version ^0.1 || ^0.2 || ^0.3 || ^0.4 || ^0.5 || ^0.6 || ^0.7 || ^0.8 || ^0.9 || ^0.10 | — | — |
laravel/framework Version ^12.0 || ^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 7 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.