The MIT license, readable documentation, tests in the repository, and a recent release provide useful transparency. Maintenance activity has paused for three months, and workflow dependencies are all unpinned.
22%
Total Score
75
79
75
Packagist marks the entire package as abandoned and names akaunting/laravel-money as its replacement. This is a severe adoption risk even though the repository remains available and recently released.
The package has existed since 2017 with 43 releases, but only one release appeared in the last 12 months. The latest release is recent enough to show some activity, though the cadence is now sparse.
The repository recorded zero commits and zero active maintainers in the last three months. A recent release and push provide some compensation, but the current maintenance pause remains concerning.
Both workflows were analyzed without reported audit findings or untrusted checkouts, but all five action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/view Version ^10.0|^11.0|^12|^13 | — | — |
vlucas/phpdotenv Version ^5.4.1 | — | — |
illuminate/support Version ^10.0|^11.0|^12|^13 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12|^13 | — | — |
illuminate/validation Version ^10.0|^11.0|^12|^13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.