hegedustibor/laravel-git-version
The repository includes tests, a changelog, and a security policy. Pin v1.0.0 if you must use it; expect compatibility and maintenance work because development appears stopped.
38%
Total Score
0
86
100
Health Score Breakdown
This is the only release, published nearly six years ago, with no releases in the last 12 months. That strongly suggests the package is no longer actively maintained.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.
All eight analyzed action references are unpinned, and the audit found a high-confidence unpinned container image in the PHP CS Fixer workflow. This weakens build reproducibility and supply-chain hygiene, though no untrusted workflow trigger or checkout was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tibor Hegedüs |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.