Laravel-specific coding standards, static-analysis rules, and code-quality tooling for Sine Macula's Laravel repositories.
72%
Total Score
caution
Usable with caveats: active releases are offset by one-person commit concentration and weak workflow hardening.
All 56 recent commits came from one contributor. Organization backing partly reduces handoff risk, but the observed maintenance activity remains highly concentrated.
Composer is used for builds, but no security scanning tools were detected. For a code-quality tooling package, this is a modest transparency and maintenance gap.
All four workflows were analyzed, but all 10 action references are unpinned, two workflows grant top-level write permissions, and a high-confidence medium-severity secrets-inherit finding appears in the release workflow. No untrusted checkouts or script injection were found, but the release workflow still warrants caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/semver Version ^3.0 | — | — |
friendsofphp/php-cs-fixer Version ^3.0 | — | — |
sinemacula/coding-standards Version ^1.25.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.