dcodegroup/laravel-xero-leave
The workflow uses four unpinned actions and the repository has no security policy or scanning, which weakens supply-chain transparency. Organization backing, a matching repository, and clear documentation provide useful support.
68%
Total Score
75
100
78
75
Health Score Breakdown
The package has existed for about 4 years and has 10 releases, but only one release appeared in the last 12 months. The recent release is positive, while the low current cadence warrants caution.
The repository recorded zero commits and zero active maintainers in the last three months. Although the latest release was recent, the absence of recent development activity raises maintenance risk.
The repository has only 2 stars and 1 fork, indicating limited adoption signals. Popularity is supporting evidence, so this is a minor concern rather than a verdict.
Composer build tooling is present, but no security scanning tools are configured. That leaves a meaningful supply-chain hygiene gap for a package intended for application integration.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nathan Rzepecki |
| Dcode Group |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/framework Version ^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
dcodegroup/laravel-configuration Version ^0.2 | — | — |
dcodegroup/laravel-xero-employee Version ^0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.