simonecerruti/laravel-translation-audit
The repository includes tests, a changelog, a security policy, dependency scanning, and a correctly licensed package. Its install-time script and broad workflow permission need attention as the project matures.
68%
Total Score
75
86
67
Health Score Breakdown
A post-autoload-dump install-time script runs during Composer operations, adding execution surface for consumers even though the signal gives no evidence of harmful behavior.
Only one registry publishing account is present, limiting visible publishing redundancy; the repository is also maintained by a single user rather than an organization.
This is the first release, published today, so there is no release history or cadence demonstrating sustained maintenance yet.
Version 0.1.0 is not a stable major release, which indicates an early API and maintenance stage despite not being marked as a prerelease.
Both workflows were fully analyzed with no audit findings, all five action references pinned, and one workflow using read-only permissions. One workflow has top-level write permissions, a mild hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 SimoneCerruti |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/finder Version ^7.4.19||^8.1.7 | — | — |
nikic/php-parser Version ^5.9 | — | — |
illuminate/support Version ^12.0||^13.0 | — | — |
thecodingmachine/safe Version ^3.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 hour ago
- Created
- 1 hour ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.