tursodatabase/turso-driver-laravel
The organization backing, clear documentation, repository tests, changelog, and MIT license support adoption. Workflow automation has a high-confidence bot-condition issue, while the absent security policy and unpinned actions add meaningful hygiene risk.
60%
Total Score
75
90
50
Health Score Breakdown
The audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow, and all 9 analyzed action references are unpinned. Three workflows also grant top-level write access, increasing workflow-maintenance and supply-chain risk.
The package has made 26 releases since June 2024, but none in the last 12 months and its latest release was in May 2025. This makes the published dependency look stale even though the overall release history was initially active.
The repository recorded zero commits and zero active maintainers during the last three months. Although the repository has a recent push timestamp, the observed commit activity does not show ongoing maintenance.
The repository has no security policy. That is a transparency gap for a database driver, particularly one that includes installation and token-management commands.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Imam Ali Mustofa |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spatie/laravel-package-tools Version ^1.16 | — | — |
darkterminal/turso-php-installer Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.