digikraaft/laravel-posts
Documentation, tests, and release notes make integration clearer. The package is licensed and its repository matches the package, but workflow references are unpinned and no security policy is present.
58%
Total Score
0
79
50
Health Score Breakdown
The package has only two releases since September 2022, with no release in roughly three years. That limited and inactive release history raises maintenance and compatibility risk.
The repository recorded no commits and no active maintainers in the last three months, while its last push was in July 2023. This is strong evidence of prolonged inactivity.
The repository has 1 star, 0 forks, and 0 watchers. Low adoption is supporting evidence of limited maturity, though it is not decisive by itself.
The repository has no security policy. For a Laravel library this is a transparency and vulnerability-reporting gap, though it is less severe than archived or deprecated status.
Both workflows were analyzed successfully and contain no untrusted checkouts, script injection, or audit findings, but all 5 action references are unpinned. That leaves avoidable build-reproducibility risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tim Oladoyinbo |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spatie/laravel-tags Version ^4.4 | — | — |
illuminate/contracts Version ^10.0 | — | — |
spatie/laravel-sluggable Version ^3.5 | — | — |
rinvex/laravel-categories Version ^7.1 | — | — |
spatie/laravel-activitylog Version ^4.7 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.