astrogoat/locations
The package has a clear repository, tests, licensing, and security reporting path. Maintenance has gone quiet for about one year, and its CI uses unpinned container images, so pinning this version deserves caution.
62%
Total Score
83
100
88
83
Health Score Breakdown
The package has 35 releases since January 2022, but no releases in the last 12 months; the formerly regular roughly two-week cadence has stopped.
There were no commits and no active maintainers in the last three months, indicating that source maintenance has stalled alongside the absent recent releases.
The repository uses Composer, but no security scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.
Both workflows were analyzed and have no untrusted triggers or script-injection findings, but all four action references are unpinned and a high-confidence audit finding identifies an unpinned container image.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Peter |
| Laura Tonning |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 astrogoat/strata Version ^0.11.0 | — | — |
illuminate/contracts Version ^8.37 || ^9.0|^10.0|^11.0 | — | — |
spatie/laravel-package-tools Version ^1.4.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.