Package Health/sandermuller/laravel-fluent-validation-rector

sandermuller/laravel-fluent-validation-rector

The package is well documented, licensed, and backed by repository tests, releases, and security reporting. Workflow references are not pinned, so build reproducibility is weaker than the maintenance picture.

Latest 1.11.1

Packagist

83%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

post-install-cmd and post-update-cmd scripts run during dependency operations, adding some install-time execution risk even though no more specific behavior is provided.

Repo issue activity

There are no open issues and two open pull requests, although no issues or pull requests were created or merged in the last month; this is a minor activity gap rather than abandonment evidence.

Repo popularity

The repository has five stars and no forks, indicating limited adoption signals; this is supporting evidence only and is outweighed by recent project activity.

Workflow audit

All seven workflows were analyzed with no reported audit findings or untrusted sinks, and most use read-only or job-level permissions. However, all 30 analyzed action references are unpinned, weakening supply-chain reproducibility, while one workflow has top-level write permissions.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Sander Muller

Direct Dependencies

Dependency	Last Release	Score
rector/rector Version ^2.5.2	—	—
symplify/rule-doc-generator-contracts Version ^11.2	—	—
sandermuller/laravel-fluent-validation Version ^1.32.0	—	—