blalmal10-a/db-zip
The project has a clear README, repository tests, release notes, and an MIT license. Its workflows are fully audited but use unpinned actions, while recent repository activity is concentrated in one contributor.
63%
Total Score
50
100
94
67
Health Score Breakdown
The package runs post-autoload-dump and post-install-cmd scripts, adding install-time behavior that warrants extra review even though no dangerous action is shown here.
Only one registry account has publish access, which is consistent with a user-owned project but leaves limited publishing redundancy.
The repository is owned by an individual user rather than an organization, so the single-maintainer and single-contributor concentration is not offset by visible organizational backing.
The package is only 34 days old, with all 6 releases published on the same day, so there is little evidence of sustained maintenance over time.
All recent commits came from one contributor, concentrating maintenance responsibility and increasing continuity risk for this user-owned project.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 blalmal10a |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.83 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.