codebar-ag/laravel-zendesk
Recent releases, documented usage, repository tests, and security tooling provide a solid foundation. No commits were recorded in the last three months, while all 15 workflow actions are unpinned and a high-confidence bot-condition issue remains.
68%
Total Score
75
100
83
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. Recent release activity and a push in late June partly offset this, but the short-term maintenance signal is still weak.
All 15 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene and workflow-integrity concern rather than a severe standalone risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sebastian Bürgin-Fix |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 saloonphp/saloon Version ^4.0 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
spatie/laravel-data Version ^4.0 | — | — |
illuminate/contracts Version ^13.0 | — | — |
saloonphp/cache-plugin Version ^3.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.