robertboes/sidecar-inertia-vite
The package has clear documentation, an MIT license, and a security policy. Its workflows are fully audited but use six unpinned actions, leaving a meaningful supply-chain hygiene gap.
38%
Total Score
0
70
100
Health Score Breakdown
Only two releases exist, with none in the last 12 months; the latest was published in July 2023, over three years ago. This strongly suggests abandonment for a package intended to support a changing Laravel and Vite stack.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release for over three years.
The assessed version is a prerelease alpha, and all recent releases are prereleases. That indicates unfinished compatibility and maintenance risk rather than a mature stable dependency.
Both workflows were analyzed successfully with no untrusted checkouts, script injection, or high-severity findings. However, all six referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Robert Boes |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^9|^10 | — | — |
hammerstone/sidecar Version ^0.4 | — | — |
inertiajs/inertia-laravel Version ^0.6 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.