spatie/laravel-http-logger
Recent release notes, a matching repository with tests, and two active contributors support ongoing maintenance. The workflow audit found an unpinned container image, and the package name strongly resembles spatie/laravel-activitylog; pin 1.12.0 and confirm this is the intended package.
62%
Total Score
100
100
88
67
Health Score Breakdown
The package borrows the identity of the much more established spatie/laravel-activitylog, with borrows_lookalike_identity true. Although artifact overlap is 0 and the README does not identify it as a copy, consumers may have intended the lookalike package.
The repository has no security policy. This is a transparency gap for a package that handles HTTP request data, although active releases and repository maintenance provide some compensation.
All 7 action references are unpinned, and the audit found a high-confidence unpinned container image in php-cs-fixer.yml. The workflows have no untrusted checkouts or script injection, but the image can still change unexpectedly.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Brent Roose |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.