cleaniquecoders/placeholdify
It has a clear MIT license, useful documentation, repository tests, and release notes for this version. Only two releases over 337 days and no security policy leave limited evidence of long-term support. The workflow setup also needs tighter controls.
63%
Total Score
75
93
50
Health Score Breakdown
The package is 337 days old with only two releases and a median interval of about 166 days, indicating a relatively thin release track for judging sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete sign that maintenance activity has paused recently.
The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented despite the presence of Dependabot scanning.
All 12 analyzed action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script-injection sink was found, so this is a hygiene and release-process concern rather than a severe standalone risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nasrul Hazim Bin Mohamad |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 11 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.