devwizardhq/wiz-captcha
The package includes a clear license, usable documentation, tests, release notes, security policy, and active repository ownership. No commits were recorded in the last three months, while every workflow action is unpinned and one high-confidence workflow audit finding affects automated merging.
63%
Total Score
75
100
94
100
Health Score Breakdown
The package is young at 136 days with four releases, all within the last 12 months; the median interval is about 1.5 hours, indicating initial release activity but limited long-term history.
The repository recorded zero commits and zero active maintainers during the last three months. For a package only about 136 days old, this is a meaningful maintenance warning despite the recent push timestamp.
All 16 analyzed action references are unpinned, and four workflows grant top-level write permissions, creating avoidable workflow supply-chain exposure. The audit also found one high-confidence bot-conditions issue in the Dependabot auto-merge workflow; the pull_request_target trigger has no reported untrusted checkout or script-injection sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Shazeedul |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/cache Version ^11.0||^12.0||^13.0 | — | — |
illuminate/routing Version ^11.0||^12.0||^13.0 | — | — |
illuminate/support Version ^11.0||^12.0||^13.0 | — | — |
illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
illuminate/validation Version ^11.0||^12.0||^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.