sinemacula/laravel-repositories
The package has clear consumer documentation, licensing, and release notes. Its small runtime dependency set and security policy help, while workflow permissions and unpinned actions warrant monitoring.
78%
Total Score
83
100
89
83
Health Score Breakdown
All 17 recent commits came from one contributor, giving the project a thin recent contributor base. Organization backing provides some handoff capacity, but no second active contributor is shown.
The repository has zero stars and forks and one watcher, so there is little public adoption evidence. This is supporting caution only because release and commit activity are strong.
Composer build tooling is present, but no security scanning tools were detected. The repository's SECURITY.md provides some compensating security-process evidence, so this is only a minor concern.
All three workflows were analyzed without untrusted checkouts or script injection, but all 10 action references are unpinned, two workflows grant top-level write permissions, and a high-confidence medium-severity secrets-inherit finding affects the release workflow. These are meaningful workflow hygiene and credential-scope concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ben Carey |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/cache Version ^12.0 || ^13.0 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
illuminate/database Version ^12.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.