inisiatif/legacy-procurement
Library untuk integrasi dengan aplikasi procurement lama di Inisiatif Zakat Indonesia
58%
Total Score
caution
Usable with caveats: no registry releases in the last 12 months and GitHub workflows have security-hygiene concerns.
Health Score Breakdown
The package has had no releases in the last 12 months, despite six releases overall and a latest release in February 2025. This indicates slowing distribution activity and raises maintenance risk.
The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed recently and has organizational backing, current development activity is not evident.
The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, but it is not evidence that the package is unsafe.
All 13 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; the single write-permission workflow increases the hygiene concern, though no untrusted checkout or script injection was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nuradiyana |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spatie/laravel-data Version ^3.9 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
spatie/laravel-query-builder Version ^5.6 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.