soyhuce/laravel-docker

The repository has no commits in the last three months, despite two releases in the last year, so maintenance is worth watching. Documentation, tests, licensing, and organization backing are solid, but the workflow audit found a high-confidence unpinned container image.

Latest 2.2.1

Packagist

67%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months. The recent release history partly offsets this, but the quiet source activity is a real maintenance concern.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and process gap rather than evidence of abandonment.

Security policy

The repository has no security policy. For a package that connects to Docker through a socket or API, the lack of a documented reporting path reduces transparency.

Workflow audit

All four workflows were analyzed and had no untrusted checkouts or script injection, but the audit found a high-confidence unpinned container image in php-cs-fixer.yml. Unpinned workflow images can change without a reviewed commit.