thekiharani/laravel-cwl
The package has clear usage documentation, repository tests, and an exact-version release note. Its young pre-1.0 status and limited security hygiene warrant pinning v0.1.6 and checking future updates.
64%
Total Score
50
83
83
Health Score Breakdown
The package is only 171 days old with seven releases, and its very short median release interval suggests a concentrated initial publishing burst rather than an established cadence.
The repository recorded zero commits and zero active maintainers over the last three months, leaving ongoing maintenance capacity unproven despite the recent release.
The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented.
v0.1.6 is not a stable-major release, so the public API may still change even though it is not marked as a prerelease.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, and it scopes permissions at job level. However, all four action references are unpinned, leaving avoidable supply-chain drift risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joseph Gitonga |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/log Version ^11.0|^12.0|^13.0 | — | — |
aws/aws-sdk-php Version ^3.0 | — | — |
monolog/monolog Version ^3.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 14 days ago
- Created
- 6 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.