Package Health

astrogoat/idme

Documentation, licensing, and repository alignment make the package straightforward to evaluate. It is newly published, with no commits in the past three months, and its workflow audit found an unpinned container image. Pin the workflow image before relying on its automation.

Latest 1.0PackagistPackagist

65%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

93

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package was released today and has only one release, so there is no release track record yet. This limits maturity evidence but does not by itself indicate abandonment.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the past three months. Although the package is new, this leaves limited evidence of ongoing maintenance.

Workflow auditcaution

All three workflow action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image; one audit file also failed, so workflow hygiene is not fully reassuring.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Laura Tonning

Direct Dependencies

DependencyLast ReleaseScore
astrogoat/strata
Version ^0.11.35
—
—
illuminate/contracts
Version ^10.0|^11.0
—
—
spatie/laravel-package-tools
Version ^1.4.3
—
—

Weekly Downloads

Info

Last Published
5 months ago
Created
5 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform