askancy/laravel-shortcode-plus
It has a clear license, useful documentation, repository tests, and dependency scanning. One workflow uses broad write permissions and all 14 actions are unpinned; a high-confidence bot-condition finding adds maintenance risk.
43%
Total Score
0
80
50
Health Score Breakdown
The last registry release was on January 13, 2024, with no releases in the past 12 months despite the package being over two years old. This strongly indicates abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of active maintenance.
The repository has no security policy, which reduces transparency for reporting vulnerabilities and is a minor concern for a package integrated into Laravel applications.
All 14 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects a workflow with top-level write permissions. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a significant hygiene concern rather than a standalone critical risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Stefano Novelli |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.7 | — | — |
illuminate/contracts Version ^9.0|^10.0 | — | — |
webwizo/laravel-shortcodes Version 1.0.* | — | — |
spatie/laravel-package-tools Version ^1.13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.