A laravel package to effortlessly sync translations with Lokalise
62%
Total Score
caution
Usable with caveats: release and commit activity stopped for over a year, despite solid package documentation and repository tests.
The package has 17 releases, but none in the last 12 months; its latest release was over a year ago. This indicates a meaningful maintenance slowdown for a package intended to track Laravel and service integrations.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. That weakens evidence of ongoing maintenance, though it does not prove abandonment by itself.
The repository has 3 stars, 0 forks, and 1 watcher, providing little independent evidence of broad adoption. Popularity is supporting evidence only, so this modest footprint is a limited concern rather than a verdict.
The repository has no security policy, which reduces transparency for reporting vulnerabilities. This is a hygiene gap rather than evidence that the release is unsafe.
Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, or auditor findings. However, all 5 action references are unpinned, leaving avoidable build-integrity exposure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/console Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
lokalise/php-lokalise-api Version ^4.2 | — | — |
bambamboole/laravel-translation-dumper Version ^1.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.