grafite/formmaker
The project remains active and documented, but adopting this package creates avoidable uncertainty. Use the named replacement package instead of this abandoned package release.
45%
Total Score
75
75
50
Health Score Breakdown
Packagist marks the entire package abandoned and names grafite/forms as its replacement. Package-wide abandonment is a substantial dependency risk despite current repository activity.
Two contributors were active, but one made 13 of 14 commits. The organization backing provides some handoff capacity, yet recent work remains highly concentrated.
The repository name does not match grafite/formmaker, although its README mentions the package. The mention provides some linkage, but the naming mismatch leaves modest uncertainty about package ownership.
The linked repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is not evidence of a vulnerability itself.
The single workflow was fully analyzed with no high-confidence audit findings, but all 3 action references are unpinned and the workflow grants top-level write permissions. These are workflow hygiene concerns without an observed untrusted trigger or sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Matt Lantz |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/view Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
matthiasmullie/minify Version ^1.3 | — | — |
Weekly Downloads
Info
- Last Published
- 10 days ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.