foxen/laravel-cancellation-tokens
The package has tests, a changelog, release notes, a matching repository, and an organization behind it. Maintenance is still lightly demonstrated, while workflow permissions, unpinned actions, and a high-confidence bot-condition issue add avoidable risk.
68%
Total Score
75
100
89
50
Health Score Breakdown
The package runs a post-autoload-dump lifecycle script. This is an install-time behavior that deserves awareness, but the provided signal does not show that it is unsafe or unusually broad.
The package is 168 days old with two releases, both in the last 12 months, but its limited history provides only modest evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. The recent inactivity is a meaningful maintenance concern for a package with only two releases.
There are no open issues and two open pull requests, but no issues or pull requests were closed in the last month. This offers little evidence of an active response cycle.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this lowers maturity confidence slightly but is not decisive for a small package.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 mrdth |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.