androlax2/laravel-model-state-graph
The package has only one alpha release and no commits in the last three months, while its README remains partly unfilled. The repository is active rather than archived and includes tests, a changelog, dependency scanning, and a valid MIT license, but workflow permissions and an unsafe bot-condition finding add maintenance risk.
58%
Total Score
50
100
83
63
Health Score Breakdown
The package runs a post-autoload-dump install-time script. This is a meaningful execution surface, but the signal does not show that the script is unsafe.
The repository is owned by an individual rather than an organization, so there is no visible institutional backing to offset the thin maintenance evidence.
There has been only one release in roughly 11 months, with no established release cadence, limiting evidence of maturity and ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete sign of slowed maintenance despite the recent push date.
The repository has one star and no forks or watchers, offering little community evidence or backup around a very early package.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Théo Benoit |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^10.0|^11.0|^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 11 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.