holiq/action-data
holiq/action-data v2.1.0 appears usable and reasonably transparent: it is MIT licensed, has a substantial README, source tests, a complete-looking 64-file tree, stable releases, no registry deprecation, no install-time lifecycle scripts, and a matching linked repository that was pushed recently. The main concerns are that the repository recorded zero commits and zero active maintainers in the last 3 months, the project has no stars or forks, only one registry maintainer, lacks a security policy and explicit workflow token permissions, and has no changelog. These issues do not make the package unfit, but they reduce confidence in ongoing maintenance and repository security hygiene.
68%
Total Score
50
50
89
80
Health Score Breakdown
Eight runtime dependencies, including several Laravel components and Valinor, create a meaningful dependency surface but are consistent with the package's Laravel DTO and validation functionality.
Only one account has registry publish access, which is a modest resilience concern for package continuity; this is not decisive because repository activity is assessed separately.
The repository is owned by an individual user rather than an organization, so there is no organizational backing evidence to offset the thin maintainer base.
The repository recorded zero commits and zero active maintainers in the last 3 months, a concrete sign of currently limited maintenance activity despite the recent push and release evidence.
There are no open issues or pull requests and no recent issue or PR activity. This is neutral-to-cautionary because it may reflect a small, quiet project rather than demonstrated responsiveness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Holiq Ibrahim |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 cuyz/valinor Version ^2.0 | — | — |
illuminate/console Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/container Version ^12.0|^13.0 | — | — |
spatie/php-cloneable Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 17 days ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.