BoxNow lockers as a delivery method of a Laravel shop: the API client and the adapter to the contract of givanov95/laravel-shipping
68%
Total Score
caution
Two releases today and v0.1.1 indicate an immature package, despite tests and a clear repository.
Only two releases exist and both were published within minutes on the package's first day, so there is not yet enough history to demonstrate sustained maintenance.
There are no commits or active maintainers recorded for the previous three months, but the repository is newly created, so this is limited evidence of abandonment rather than a severe failure.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a modest transparency gap for a package handling delivery integrations.
v0.1.1 is a pre-1.0 release, and the README says the partner API is not yet checked, so compatibility and production maturity remain limited.
The sole workflow was fully analyzed and has no dangerous triggers or audit findings, but its only action reference is unpinned, which weakens build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
brick/money Version ^0.15 | — | — |
laravel/framework Version ^12.0 || ^13.0 | — | — |
givanov95/typed-http Version ^2.1 | — | — |
givanov95/laravel-shipping Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.