spatie/laravel-ignition

The package has clear licensing, release notes, repository tests, and organization backing. Recent repository activity is paused, and the workflows use unpinned actions and a high-confidence unpinned container image.

Latest 2.12.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, a real sign that maintenance has slowed even though the repository was pushed recently.

Security policy

The repository has no security policy, leaving vulnerability reporting guidance undocumented; this is a transparency gap, but it is not evidence of abandonment by itself.

Workflow audit

All 12 action references are unpinned, and the audit found a high-confidence unpinned container image; the pull_request_target workflow has no untrusted checkout or script-injection sink, limiting the risk to workflow hygiene rather than a severe dependency verdict.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2024-10373 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. spatie/laravel-ignition is vulnerable to Generation of Error Message Containing Sensitive Information in versions 0.0.1 - 2.4.1.	0.0.1 - 2.4.1	Low

Package versions

Maintainers

Spatie

Direct Dependencies

Dependency	Last Release	Score
nesbot/carbon Version ^2.72\|^3.0	—	—
spatie/ignition Version ^1.16	—	—
symfony/console Version ^7.4\|^8.0	—	—
illuminate/support Version ^11.0\|^12.0\|^13.0	—	—
symfony/var-dumper Version ^7.4\|^8.0	—	—