finller/laravel-invoices
One maintainer makes continuity fragile, while the missing security policy and workflow weaknesses add operational risk. The MIT license, repository tests, and frequent releases provide useful protection.
42%
Total Score
83
88
50
Health Score Breakdown
Packagist marks the package abandoned and names elegantly/laravel-invoices as the replacement. Although the linked repository is active, package-level deprecation is a major adoption risk for this release.
All 93 recent commits came from one contributor, creating a meaningful continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.
The repository has no security policy. That weakens vulnerability-reporting transparency for a package used in applications, with no provided evidence compensating for the gap.
All 11 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. There are no untrusted checkouts or script injections, but the workflow hygiene still adds risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Quentin Gabriele |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 dompdf/dompdf Version ^3.1 | — | — |
illuminate/contracts Version ^13.0 | — | — |
elegantly/laravel-money Version ^4.2.0 | — | — |
spatie/laravel-package-tools Version ^1.14 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.