ditscheri/laravel-check-constraints
It has a clear license, useful documentation, and repository tests. Its CI uses unpinned actions and images, with a high-confidence bot-condition warning, so releases deserve extra review.
60%
Total Score
67
100
93
100
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months, indicating a recent pause in development and raising abandonment risk.
There are four open pull requests, with no new or merged pull requests in the last month; together with the absent recent commits, this suggests outstanding maintenance work.
This is not marked as a prerelease, but it remains below version 1.0, so its public API may still change more readily than a stable-major package.
All five workflows were analyzed, but all 11 action references are unpinned. The audit also found high-confidence bot-condition and unpinned-image issues; the pull_request_target workflow has broad top-level write permissions, increasing CI supply-chain exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Bakan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.