chiiya/laravel-tmdb
Laravel SDK for the TMDB API
62%
Total Score
caution
Usable with caveats: recent release, but no commits in three months and notable workflow weaknesses.
Health Score Breakdown
All three workflows were analyzed, but all eight action references are unpinned, and a high-confidence bot-conditions finding says actor context may be spoofable in the Dependabot auto-merge workflow. The pull_request_target workflow has top-level write permissions, increasing the impact of that weakness.
The registry namespace and repository are owned by the same individual account, so the package has direct ownership alignment but no organization-level backing shown by this signal.
The package has existed since June 2022 with 10 releases and a latest release on May 29, 2026, but only one release in the last 12 months indicates a slow cadence.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that ongoing maintenance may have slowed.
There are no open issues, but four pull requests remain open and none were merged in the last month, which is a modest maintenance concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Elisha Witte |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 chiiya/tmdb-php Version ^1.0 | — | — |
illuminate/contracts Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.92 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.