webid/cms
It ships a substantial Laravel codebase with tests, a useful README, and an MIT license. Build tooling, security scanning, and an organization-owned matching repository add transparency, though unpinned workflow actions and no security policy leave hygiene gaps.
58%
Total Score
50
83
50
Health Score Breakdown
The package has 103 releases, but the latest was over three years ago and there were no releases in the last 12 months. This strongly raises abandonment risk despite the historically active release count.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. That is a substantial maintenance concern for a framework-integrated CMS.
No security policy is present in the repository. For a CMS package, this reduces transparency around vulnerability reporting and handling.
The single workflow was fully analyzed with no high-confidence audit findings or untrusted execution paths, but all five referenced actions are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions create a supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Elise |
| Wilfried |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/nova Version ~2.0|~3.0 | — | — |
tightenco/ziggy Version ^1.4 | — | — |
laravel/framework Version ^9 | — | — |
idf/nova-html-card Version ^1.2 | — | — |
eminiarts/nova-tabs Version 1.3.* | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.