Package Health

zivar/laravel-security

Tests, documentation, and an MIT license provide a solid starting point. The project is new and maintained by one active contributor, while missing security guidance and unpinned workflow actions reduce confidence.

Latest v1.0.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

This is the only release, published 39 days ago, so there is not yet enough release history to establish long-term maintenance reliability.

Repo bus factorcaution

One contributor made 100% of the 2 recent commits, leaving maintenance highly concentrated in a single person.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, which is limited activity for a package that is just 39 days old but does show some ongoing work.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in a security-focused package.

Workflow auditcaution

The single workflow was fully analyzed with no injection findings, but both of its action references are unpinned, so builds can follow changing action code.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Zivar Security Team

Direct Dependencies

DependencyLast ReleaseScore
illuminate/http
Version ^10.0|^11.0|^12.0|^13.0
—
—
illuminate/console
Version ^10.0|^11.0|^12.0|^13.0
—
—
illuminate/support
Version ^10.0|^11.0|^12.0|^13.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform