astrogoat/verify-pass

The MIT license, repository tests, and security policy provide solid transparency, while the small organization-backed project remains identifiable. Its current maintenance and workflow hygiene still warrant pinning this version cautiously.

Latest v1.15.0

Packagist

55%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 16 releases over about 4 years, but no releases in the last 12 months; the latest release was about 13 months ago, indicating stalled maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, which is consistent with the long release gap and raises abandonment risk.

Workflow audit

Both workflows were analyzed completely and have no untrusted checkouts or script injection, but one high-confidence finding reports an unpinned container image, leaving the build exposed to changing upstream content.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Laura Tonning

Direct Dependencies

Dependency	Last Release	Score
astrogoat/strata Version ^0.7.0\|^0.8.0\|^0.9.0\|^0.10.0\|^0.11.0	—	—
illuminate/contracts Version ^8.37 \|\| ^9.0\|^10.0\|^11.0	—	—
spatie/laravel-package-tools Version ^1.4.3	—	—