saloonphp/laravel-plugin
Three contributors share recent commit activity, and the repository includes tests and release notes. GitHub Actions uses eight unpinned references, while the project has no security policy or automated security scanning.
86%
Total Score
100
100
94
50
Health Score Breakdown
The package runs a post-autoload-dump install-time script. This adds some installation complexity, but the signal alone does not show harmful behavior or make the release unsuitable.
The repository uses Composer build tooling, but no security-scanning tool was detected. The missing scan reduces assurance somewhat without indicating abandonment or an unsafe release.
No repository security policy was found. This is a transparency and reporting gap, but it is not severe enough on its own to outweigh the active maintenance evidence.
All three workflows were analyzed with no auditor findings and no untrusted checkout or script-injection paths. However, all eight action references are unpinned and one workflow grants top-level write access, creating a modest reproducibility and permissions concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sam Carré |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/finder Version ^7.0 || ^8.0 | — | — |
saloonphp/saloon Version ^4.0 | — | — |
illuminate/console Version ^12.39.0 || ^13.0 | — | — |
illuminate/support Version ^12.39.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.