tag1/scolta-laravel
The project has sustained development, several active contributors, and clear documentation for consumers. One workflow uses an unpinned container image, so its build supply chain has a limited hygiene weakness.
88%
Total Score
100
100
100
75
Health Score Breakdown
The repository has no published security policy. This is a transparency gap for a package that exposes application routes and AI-related functionality, although active development and security scanning partly compensate.
All three workflows were analyzed and all action references are pinned, with no untrusted checkout or script-injection findings. However, the audit found one high-confidence unpinned container image in CI, leaving a limited build reproducibility and supply-chain hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tag1 Consulting |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tag1/scolta-php Version ^1.3.0 | — | — |
illuminate/console Version ^11.0|^12.0|^13.0 | — | — |
illuminate/routing Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.