tomaszboloz/laravel-updater
The repository includes tests, release notes, a license, and a security policy. All seven workflow actions are unpinned, and the project has no established release history yet, so pin this version while monitoring maintenance.
72%
Total Score
100
100
83
83
Health Score Breakdown
Eight releases appeared on the same day and the package age is 0 days, showing active initial publishing but no evidence yet of long-term maintenance or release stability.
The repository has 1 star and no forks or watchers. This provides little external validation, but popularity is supporting evidence rather than a health verdict.
The repository uses Composer build tooling, but no security scanning tools were detected. This is a modest transparency gap for a package that performs application updates.
All workflows were analyzed successfully, use read-only permissions, and contain no untrusted checkouts, injection findings, or other audit findings. However, all 7 of 7 action references are unpinned, leaving the workflow exposed to upstream action changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tomasz Bołoz |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^12.0|^13.0 | — | — |
symfony/process Version ^7.2|^8.0 | — | — |
illuminate/cache Version ^12.0|^13.0 | — | — |
illuminate/queue Version ^12.0|^13.0 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
Weekly Downloads
Info
- Last Published
- 7 hours ago
- Created
- 12 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.