spatie/laravel-backup
Healthy and suitable to depend on. It has a long release history, a current stable release, active contributors, and strong repository backing; the main caveats are missing security-policy documentation and permissive workflow permission settings.
91%
Total Score
100
100
100
63
Health Score Breakdown
One of five workflows uses pull_request_target for Dependabot auto-merge, which warrants review because that trigger can grant elevated workflow context, although no untrusted checkout or script-injection patterns were detected.
No SECURITY.md or other security policy was found, leaving vulnerability-reporting expectations unclear for a package with access to application backups.
Three workflows omit top-level token permissions and two declare top-level write access, indicating weaker-than-ideal least-privilege workflow configuration despite the repository's other security tooling.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Freek Van der Herten |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/finder Version ^7.3.5|^8.0 | — | — |
symfony/console Version ^7.3.6|^8.0 | — | — |
league/flysystem Version ^3.30.2 | — | — |
spatie/db-dumper Version ^4.0 | — | — |
illuminate/events Version ^12.40|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.