spatie/laravel-stripe-webhooks
Clear documentation, source tests, release notes, and a focused dependency set support adoption. The workflow audit found an unpinned container image, while the repository lacks a security policy; pinning build inputs and documenting reporting would improve transparency.
84%
Total Score
100
100
100
67
Health Score Breakdown
The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package that handles signed payment webhooks.
All 3 workflows were analyzed without untrusted checkouts or script injection, but the audit found one high-confidence unpinned container image and all 7 action references are unpinned; this is a build-reproducibility caution, not a severe dependency-health failure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Freek Van der Herten |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 stripe/stripe-php Version ^7.51|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0|^14.0|^15.0|^16.0|^17.0|^18.0|^19.0|^20.0|^21.0 | — | — |
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
spatie/laravel-webhook-client Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.