tey/mod
Lightweight toolkit for modular development in Laravel, for you and your coding agents. Choose or extend common layouts like DDD and modular monoliths, or create your own.
58%
Total Score
caution
A three-day-old pre-1.0 package has one active contributor and high-confidence workflow hygiene concerns.
Health Score Breakdown
The package runs a post-autoload-dump Composer script during installation, which is relevant install-time behavior and adds a review point for consumers.
The package is only 3 days old, despite 11 releases in that period; this shows active shipping but provides little long-term maintenance evidence.
One contributor made all 106 commits in the last 3 months. Organization ownership provides some handoff potential, but no second active contributor is shown.
v0.6.1 is not a stable major release, and the README identifies the project as pre-1.0 with possible minor-release API changes.
All five workflows were analyzed, but all 16 action references are unpinned and a high-confidence bot-conditions finding reports spoofable actor context in the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jasper Tey |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/framework Version ^12.0|^13.0 | — | — |
symfony/filesystem Version ^7.2|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 hours ago
- Created
- 3 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.