clevyr/laravel-geocoder
A matching repository has tests, a changelog, clear licensing, and Dependabot coverage. Workflow checks are imperfect, so pinning this old release needs caution.
48%
Total Score
75
80
50
Health Score Breakdown
Only two releases exist, and the latest was published in August 2022, with no releases in the last four years. This is strong evidence of abandonment risk despite the repository remaining available.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The last push was in December 2023, so recent maintenance is not demonstrated.
All 11 action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are workflow hygiene and supply-chain cautions rather than a severe standalone risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Aaron Krauss |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^9.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.