yarunoka/laravel
Clear documentation, repository tests, release notes, and a matching license support day-to-day use. The release workflow grants an app token broad permissions, while all recent commits come from one contributor despite organizational backing.
64%
Total Score
83
90
100
Health Score Breakdown
Seven releases in the first 41 days show active early development, but the package is still young and has limited evidence of long-term stability.
All 39 recent commits came from one contributor, leaving a thin operational fallback. Organizational ownership provides some handoff capacity, but no second active contributor is shown.
All four workflows were analyzed with no untrusted checkouts, script injection, or unpinned actions, but the release workflow has a high-confidence finding that its app token inherits blanket installation permissions; its top-level write scope increases the concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yarunoka/core Version ^1.3 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
illuminate/container Version ^13.0 | — | — |
illuminate/contracts Version ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.