viicslen/laravel-progress-messages
The package has a clear MIT license, repository tests, release notes, and a README for integration. Its install hook, unpinned workflow actions, and lack of security policy leave some avoidable maintenance and supply-chain hygiene concerns.
56%
Total Score
50
86
50
Health Score Breakdown
The package runs a post-autoload-dump install-time script, adding execution during dependency installation and therefore some supply-chain exposure.
Only one release exists, published today, so there is no demonstrated release track record or established maintenance cadence yet.
The repository recorded zero commits and zero active maintainers in the last three months; although the package is new, this provides no evidence of ongoing development after the current release.
The repository has no published security policy, which reduces transparency about how vulnerabilities should be reported and handled.
v0.0.1 is an early, non-stable-major release, so compatibility and API expectations are not yet well established.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Victor R |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/prompts Version ^0.3.6 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.