yamut/laravel-redacted
The package includes tests, a clear README, MIT licensing, and four releases in 15 days. Its workflow uses read-only permissions and Dependabot, but lacks a security policy and leaves all 10 actions unpinned.
65%
Total Score
67
100
83
50
Health Score Breakdown
The repository is owned by an individual account rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.
The package is only 86 days old, with four releases in 15 days. That shows active early development but provides limited evidence of long-term maintenance.
All 16 recent commits came from one contributor, so maintenance depends entirely on a single person and has limited handoff resilience.
The repository has one star and no forks or watchers. Popularity is only supporting evidence, but these figures provide little external evidence of maturity or community support.
The repository has no security policy. For a package that retrieves and caches secrets, this is a transparency gap for reporting and handling security issues.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^2.0 | — | — |
vlucas/phpdotenv Version ^5.6.1 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.