geniuspay/laravel-sdk
The repository has had no commits or active maintainers for three months, and the package has only two releases, both on its first day. The license mismatch and unpinned workflow actions add transparency and build-hygiene concerns.
58%
Total Score
25
75
67
Health Score Breakdown
There were zero commits and zero active maintainers during the last three months, a strong sign that maintenance may have stopped shortly after publication.
An MIT license is declared, but the artifact license file is Apache-2.0, creating an unresolved licensing mismatch despite the presence of license files.
The package is only 102 days old and has two releases, both published on the same day, so its maintenance record is still very limited.
There were no new or closed issues or pull requests in the last month, alongside one open issue; this provides no evidence of ongoing project response.
The repository name does not match the package name and its README does not mention the package, so the linkage between the published package and source repository is not clearly demonstrated.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 GeniusPay |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 8 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.