cleaniquecoders/laravel-contract
Clear documentation, tests in the source repository, and a matching organization-owned project support adoption. The modest release cadence and no commits in the last three months make ongoing maintenance less certain, while workflow hygiene needs attention.
66%
Total Score
75
100
94
75
Health Score Breakdown
The package is about 2 years and 9 months old with 6 releases, but only 1 release in the last 12 months and a median interval of about 109 days indicate a modest maintenance cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which weakens evidence of continuing maintenance despite the recent release.
No repository security policy was found, leaving vulnerability-reporting guidance undocumented; this is a transparency gap but not evidence of abandonment.
All 12 analyzed action references are unpinned, and one high-confidence finding reports spoofable actor checks in the Dependabot auto-merge workflow. The pull request target workflow also has top-level write permission, though no untrusted checkout or script injection was detected.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nasrul Hazim Bin Mohamad |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^9.0 | ^10.0 | ^11.0 | ^12.0 | ^13.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.