rokde/laravel-clone-database-command
The package is documented, tested in the repository, licensed, and not deprecated. GitHub automation has a high-confidence bot-condition issue, uses unpinned actions, and grants broad workflow permissions.
55%
Total Score
50
100
94
50
Health Score Breakdown
A post-autoload-dump lifecycle script runs during installation. This adds execution surface and warrants attention, although the signal does not show that the script is harmful.
The package and repository are owned by the same individual account, so there is no organizational backing to compensate for the thin maintenance history.
This is the package's only release, published over two years ago, with no releases in the last 12 months; that weakens confidence in ongoing maintenance.
There were no commits or active maintainers in the last three months, reinforcing the concern raised by the package's single-release history.
No security policy is present. For a package that clones production data, this is a transparency gap because users may need a clear channel for reporting data-handling issues.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Robert Kummer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/queue Version ^10.0 | — | — |
illuminate/support Version ^10.0 | — | — |
illuminate/database Version ^10.0 | — | — |
illuminate/contracts Version ^10.0 | — | — |
rokde/laravel-utilities Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.