elegantly/laravel-referrer
The package includes a substantial README, changelog, repository tests, an MIT license, and a small runtime dependency set. Pin v2.1.0 and monitor future releases before upgrading.
66%
Total Score
75
100
94
50
Health Score Breakdown
The package has 13 releases over roughly two years, but only one release in the last 12 months. Combined with no recent repository commits, this suggests maintenance has slowed.
The repository recorded zero commits and zero active maintainers in the last three months. This is a concrete sign of currently quiet maintenance, although it does not by itself prove abandonment.
The repository has no SECURITY.md policy. This is a modest transparency gap for reporting vulnerabilities, but it is not evidence that the package is unsafe to depend on.
All nine analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. One pull_request_target trigger has no untrusted checkout or script-injection sink, so the workflow evidence is a hygiene concern rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Quentin Gabriele |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.