imdhemy-simpleclick-dustin/laravel-purchases
Good documentation, repository tests, and static analysis make the package easier to evaluate. Its MIT declaration conflicts with the BSD-3-Clause license file, while workflow images are unpinned.
38%
Total Score
0
75
Health Score Breakdown
The package has had 27 releases but none in the last 12 months, and its latest release was about five years ago. This is strong evidence of abandonment for a library handling evolving app-store integrations.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long release gap rather than showing current maintenance between releases.
A license file is present, but it identifies BSD-3-Clause while the package manifest declares MIT. The mismatch creates avoidable uncertainty about the terms consumers receive.
Both workflows were analyzed successfully and have no untrusted checkouts or script-injection findings. However, all five action references are unpinned and the audit found a high-confidence unpinned container image, leaving the build exposed to changing external code.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 imdhemy |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^2.41 | — | — |
imdhemy/appstore-iap Version ^0.3 | — | — |
imdhemy/google-play-billing Version ^0.6 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.