HookPress is a Laravel package that uses Composer hooks to automatically discover, filter, and cache classes, traits, and interfaces in your application
70%
Total Score
100
83
100
The package is 382 days old but has only one release in the last 12 months, indicating a sparse release cadence. Its latest release was recent, so this is a maintenance concern rather than evidence of abandonment.
Version v0.1.8 is not a stable-major release, so API compatibility may still evolve, although it is not marked as a prerelease.
All 14 action references are unpinned, five workflows grant top-level write permissions, and the audit found high-confidence bot-condition and template-injection issues. The pull-request trigger has no untrusted checkout or script-injection finding, which limits the immediate risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^9.0||^10.0||^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.