roundly-consulting/onboarding-for-laravel
The repository includes tests, release notes, security reporting, and active recent commits. Its single-contributor history and unpinned workflow actions leave meaningful maintenance and build-integrity concerns.
70%
Total Score
83
100
93
83
Health Score Breakdown
This is a new package with one release published today, so there is no established release track record yet. Recent repository activity provides some compensating evidence, but maturity remains unproven.
All 12 recent commits came from one contributor, creating a real continuity risk. Organization ownership provides some ability to hand off maintenance, but no second active contributor is shown.
All seven analyzed action references are unpinned, so workflow dependencies can change without a commit review. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-confidence findings, which limits this to a hygiene caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andrej Mihaliak |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^12.0|^13.0 | — | — |
roundly-consulting/package-toolkit-for-laravel Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 hours ago
- Created
- 8 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.