astrogoat/blackcart
The package includes a README, changelog, repository tests, and an MIT license. Its organization-backed project has no recent activity, and the workflows use unpinned container images.
35%
Total Score
75
70
75
Health Score Breakdown
Packagist marks the entire package abandoned, with no replacement named. This is a serious adoption and maintenance warning even though the specific release is not separately withdrawn.
The package has had no releases in the last 12 months; its latest release was about 20 months ago. The 14-release history and roughly 64-day median interval show prior activity but do not offset the current pause.
The repository recorded zero commits and zero active maintainers during the last 3 months. The non-archived repository provides some continuity, but the current lack of activity raises abandonment risk.
Both workflows were analyzed completely, with no untrusted checkouts or script injection, but the audit found a high-confidence unpinned container image and all four action references are unpinned. This is a workflow hygiene and reproducibility concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Laura Tonning |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 astrogoat/strata Version ^0.7.0|^0.8.0 | — | — |
astrogoat/shopify Version ^1.0 | — | — |
illuminate/contracts Version ^8.37 || ^9.0|^10.0 | — | — |
spatie/laravel-package-tools Version ^1.4.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.