Package Health

shammaa/laravel-security

The package has a clear license, tests, a substantial README, and a repository that matches its name. It lacks security policy and scanning, limiting assurance for security-sensitive code.

Latest v1.1.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Repo bus factorcaution

One contributor made 100% of the commits in the last 3 months. With user-owned rather than organization-backed maintenance, this creates meaningful continuity risk.

Repo commit activitycaution

The repository recorded only 1 commit in the last 3 months, showing limited recent maintenance activity despite a recent push. This raises concern for a security-focused package.

Repo popularitycaution

The repository has 2 stars, 1 fork, and 0 watchers. Low adoption is only supporting evidence, but it provides little community validation or backup maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a hygiene and assurance gap for this package's stated purpose.

Security policycaution

The repository has no security policy, leaving no documented reporting or response process for a package that handles security protections.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Shadi Shammaa

Direct Dependencies

DependencyLast ReleaseScore
illuminate/auth
Version ^9.0|^10.0|^11.0|^12.0
illuminate/http
Version ^9.0|^10.0|^11.0|^12.0
illuminate/cache
Version ^9.0|^10.0|^11.0|^12.0
illuminate/console
Version ^9.0|^10.0|^11.0|^12.0
illuminate/support
Version ^9.0|^10.0|^11.0|^12.0

Weekly Downloads

Info

Last Published
8 months ago
Created
9 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform