egyjs/arb
The package includes a clear README, license, tests in the repository, release notes, and a modest dependency set. GitHub Actions use five unpinned references, and the repository has no security scanning or security policy; pin this version if its payment integration is still required.
58%
Total Score
38
100
83
63
Health Score Breakdown
There were no commits and no active maintainers in the last three months, consistent with the long pause since the last release and increasing abandonment risk.
The package uses a post-autoload-dump lifecycle script. This is an install-time behavior worth reviewing, but the signal alone does not show that it is unsafe or unusually complex.
A single registry maintainer account is a thin publishing base, although the linked repository shows matching ownership and the package has a complete project structure.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is no demonstrated organizational maintenance backing.
The package has seven releases, but its latest release was about two years ago and there were no releases in the last 12 months, indicating a significant maintenance gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 egyjs |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^10.0||^11.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.