waterhole/core

Waterhole core

Latest v0.7.2

Packagist

82%

Total Score

Maintainer Stability

Maturity

100

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factor

Two contributors were active, but one produced about 98% of recent commits, leaving maintenance highly concentrated despite organization ownership.

Workflow audit

All five workflows were analyzed with no injection, dangerous-trigger, or audit findings, and two scope permissions at job level; however, all 18 action references are unpinned, weakening build reproducibility.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10140 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. waterhole/core is vulnerable to Cross-site Scripting (XSS) in versions 0.1.0 - 0.5.0.	0.1.0 - 0.5.0	Medium
AIKIDO-2026-10139 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. waterhole/core is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.1.0 - 0.5.0.	0.1.0 - 0.5.0	Low

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
nyholm/psr7 Version ^1.8	—	—
waterhole/sso Version ^0.1	—	—
jrmajor/fluent Version ^1.0.1	—	—
livewire/blaze Version ^1.0	—	—
laravel/sanctum Version ^4.0	—	—