dutchcodingcompany/livewire-recaptcha
The package has a clear README, repository tests, and release notes for this version, with no install-time scripts. Organization ownership, Dependabot, and a security policy provide useful continuity.
65%
Total Score
67
94
100
Health Score Breakdown
Only two releases have appeared over about 1 year and 10 months, with one release in the last 12 months and a median interval of about 675 days. This suggests a slow maintenance cadence, though the latest release is recent in the collected history.
One contributor made all commits in the last 3 months. Organization ownership provides some handoff capacity, but no second active contributor is shown to share current maintenance.
Only one commit was recorded in the last 3 months, indicating limited recent development activity. The recent push shows the project is not dormant, but maintenance capacity appears thin.
All five workflows were analyzed, but all 10 action references are unpinned and the audit found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these remain workflow hygiene concerns rather than a severe dependency risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 livewire/livewire Version ^3.0|^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.