codebar-ag/laravel-flatfox
The package has clear documentation, tests in the repository, a license, and security tooling. Its automated dependency-update workflow also needs tighter controls, increasing the risk of relying on future releases.
15%
Total Score
100
100
64
100
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement specified; this is a severe adoption and continuity risk for a dependency.
The linked source repository is archived, which strongly indicates that active maintenance and future fixes should not be expected, even though it was pushed recently.
The package has 10 releases but none in the last 12 months, despite a relatively short historical median interval; this supports concern about abandonment.
The audit found a high-confidence, high-severity bot-condition issue in the Dependabot auto-merge workflow, and all 14 analyzed action references are unpinned. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these remain workflow hygiene and supply-chain concerns rather than standalone catastrophic risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sebastian Bürgin-Fix |
| Rhys Lees |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 saloonphp/saloon Version ^3.10.1 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
illuminate/contracts Version ^12.0 | — | — |
saloonphp/cache-plugin Version ^3.0 | — | — |
saloonphp/laravel-plugin Version ^3.5 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.