henriqueak/laravel-boleto
The MIT license, repository tests, and install-time simplicity are positives, while the repository has no security policy or scanning. Future compatibility and maintenance cannot be assumed for this project.
42%
Total Score
71
83
Health Score Breakdown
The latest release was published on February 22, 2019, with no releases in the last 12 months; the package has been unchanged for over 8 years. This is strong evidence of abandonment risk for a library dependency.
Composer is used for builds, but no security scanning tooling is present. That weakens ongoing security hygiene, although it does not by itself show unsafe package behavior.
The repository is not archived, which is a positive, but it was last pushed on February 22, 2019. The inactive repository does not offset the long release gap.
The repository has no documented security policy, leaving the process for reporting and handling vulnerabilities unclear. This is a maintenance and transparency gap, though not severe on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version 1.* | — | — |
setasign/fpdf Version ^1.8 | — | — |
illuminate/view Version ~5.1 | — | — |
illuminate/events Version ~5.1 | — | — |
illuminate/support Version ~5.1 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.