bavix/laravel-clickhouse
Tests, release notes, and security scanning provide useful maintenance structure. However, the project reports no active development in the last three months, and its workflows use unpinned images and inherited secrets.
58%
Total Score
75
100
94
67
Health Score Breakdown
The package has existed since July 2020 with 19 releases, but only one release in the last 12 months, indicating a substantially slower recent cadence.
There were zero commits and zero active maintainers in the last three months, which is strong evidence of slowed maintenance and raises abandonment risk.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.
All 12 action references are unpinned, and high-confidence findings identify unpinned container images in two workflows; a medium-confidence finding also reports inherited secrets in the changelog workflow. The audit was complete, with no untrusted checkouts or script injection detected.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/framework Version ^11.0|^12.0 | — | — |
bavix/clickhouse-builder Version ^6.2 | — | — |
bavix/clickhouse-php-client Version ^3.2 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.