LaraPlugins.io launched security advisory scanning for Laravel packages, which immediately exposed a two-month-old bug: a data sync pipeline refactor had stopped syncing plugin versions while health scores continued updating normally. The fix re-enabled daily and weekly version syncs, switched to cursor-based chunked iteration to handle the backlog without memory issues, and added a live Packagist API fallback so advisory checks stay accurate even when local data lags. A new health badge feature was also shipped, letting package maintainers embed a plugin health score and security status badge directly in their README.
Table of contents
What brokeWhat was fixedWhile I was in the pipeline anywayIf you use LaraPlugins to evaluate packagesTimelineThank you for reading my article32K Impressions2 Comments