api-skeletons/laravel-hal
The package is well documented, tested, licensed, and supported by an active-looking organization. Its main concern is that releases stopped over four years ago and recent repository activity is absent; workflow dependencies are also mostly unpinned.
58%
Total Score
75
92
50
Health Score Breakdown
The latest release was on February 1, 2022, with no releases in the last 12 months, indicating a long period without published maintenance. The package still has 14 releases and a stable 5.0.2 version, which provides some maturity evidence.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release gap and raising abandonment concerns.
No repository security policy was found, which limits vulnerability-reporting transparency, though this is a secondary concern beside the maintenance evidence.
All four workflows were analyzed with no reported dangerous findings, untrusted checkouts, or script injection. However, 12 of 13 action references are unpinned, leaving a supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tom H Anderson |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^2.30 | — | — |
laravel/framework Version ^8.0 || ^9.0 | — | — |
kylekatarnls/update-helper Version ^1.2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.