franktheprogrammer/laravel-queuedup
The package is documented, licensed, and tested in its repository, but its automation has two high-confidence findings: an unpinned container image and a spoofable bot condition.
42%
Total Score
0
70
50
Health Score Breakdown
This is the package's only release, published over three years ago, with no releases in the last 12 months; that strongly raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of newer releases and indicating inactive maintenance.
Version 0.1.0 is not a stable major release, which fits an early project but provides limited maturity evidence alongside the stalled release history.
All 11 action references are unpinned, and the audit found high-confidence issues involving a spoofable bot condition and an unpinned container image; the pull request trigger has no untrusted checkout or script-injection sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Frank Perez |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^9.0 | — | — |
spatie/data-transfer-object Version ^3.7 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.