vuthaihoc/cockroachdb-laravel
The project has regular releases, recent commits from two active contributors, repository tests, and a clear license. Its automated workflows need tightening, especially the high-confidence bot check and completely unpinned actions.
78%
Total Score
100
100
100
83
Health Score Breakdown
All six workflows were analyzed, but all 17 action references are unpinned and one high-confidence bot-conditions finding affects the pull_request_target automation. No untrusted checkout or script-injection sink was found, limiting the impact to workflow hygiene rather than a severe dependency risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Peter Fox |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/database Version ^12.0|^13.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
vuthaihoc/laravel-db-portable Version ^0.7 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.