astrogoat/datadog

Its security policy, tests, and release notes provide useful transparency. The workflow audit found a high-confidence unpinned container image, so pinning dependencies around 1.4.0 is preferable.

Latest 1.4.0

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has five releases, with a median interval of about 30 days, but no registry releases in the last 12 months and its latest release was over a year ago. This indicates materially slowed maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months. Together with the old latest release, this is evidence of stalled maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than a severe dependency-health issue.

Workflow audit

All three workflows were analyzed and no untrusted checkout or script injection was found, but the audit identified a high-confidence unpinned container image and all three workflows use unpinned actions. The incomplete audit due to one failed file also limits the cleanliness of this result.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Laura Tonning

Direct Dependencies

Dependency	Last Release	Score
astrogoat/strata Version ^0.7.7\|^0.8.0\|^0.9.0\|^0.10.0\|^0.11.0	—	—
illuminate/contracts Version ^10.0\|^11.0	—	—
spatie/laravel-package-tools Version ^1.4.3	—	—