SDK Laravel multi-provider de geolocalizacao (Google Maps, HERE)
68%
Total Score
caution
Very new 0.x package with rapid releases and six unpinned workflow actions, despite active maintenance and repository tests.
The package is only 3 days old but already has 6 releases, with a median interval of 0 days. This shows active iteration but provides little evidence of long-term stability.
The repository has 0 stars, forks, and watchers. Because the project is only 3 days old, this is weak supporting evidence rather than a standalone abandonment concern.
No repository security policy was found. This is a transparency gap, although the available Composer audit and workflow evidence partly compensate.
The assessed release is v0.5.1 in the 0.x series, so its public API may change before 1.0.0; it is not marked as a prerelease.
The single workflow was fully audited, uses read-only permissions, and has no untrusted checkout or injection findings. However, all 6 action references are unpinned, leaving avoidable build-integrity exposure.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0 | — | — |
guzzlehttp/guzzle Version ^7.5 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.