yard/brave-hooks
Healthy and actively maintained, with strong release and repository activity. The main caveats are very low public popularity, no security policy, and workflows without explicitly declared top-level permissions.
88%
Total Score
100
100
94
80
Health Score Breakdown
The repository has only 1 star and no forks, which provides little evidence of broad external adoption; this is a caution, but active maintenance compensates for the limited popularity signal.
No SECURITY.md or other security policy was found, leaving vulnerability-reporting expectations unclear; active tooling and maintenance partly reduce the concern but do not replace a policy.
All 4 workflows lack top-level token permission declarations. None requests top-level write access, but explicitly declaring least-privilege permissions would improve CI transparency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 roots/acorn Version ^5.0 | — | — |
spatie/laravel-csp Version ^2.10 | — | — |
yard/wp-hook-registrar Version ^2.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 7 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.