robertol/telescope
The release is backed by active contributors, tests, release documentation, security reporting, and dependency scanning. One workflow uses an unpinned container image, and several workflows grant broad write permissions, so automation hygiene is not ideal.
82%
Total Score
100
100
100
75
Health Score Breakdown
The package runs a post-autoload-dump script, which is a normal Composer integration point but adds install-time behavior that should be understood by consumers.
All seven workflows were analyzed and all eight action references are pinned, but one high-confidence audit finding reports an unpinned container image; four workflows also have top-level write permissions. No untrusted checkout or script-injection sink was found, limiting this to a hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Taylor Otwell |
| Mohamed Said |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/console Version ^5.3|^6.0|^7.0|^8.0 | — | — |
laravel/sentinel Version ^1.0 | — | — |
laravel/framework Version ^8.37|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
symfony/var-dumper Version ^5.0|^6.0|^7.0|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.