Package Health

isaacongoma/laravel-feed

It has a clear MIT license, a useful README, and tests in the source repository. Its old automation also leaves container images unpinned, adding avoidable build hygiene risk.

Latest 3.1.3PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

80

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has had no release in over five years, despite 44 releases overall, indicating prolonged abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap.

Repo issue activitycaution

There were no new or merged pull requests and no issue activity in the last month; the unknown open-issues count limits what can be concluded, but does not offset the inactivity evidence.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a transparency gap rather than evidence of unsafe code.

Workflow auditcaution

Both workflows were analyzed successfully, but all four referenced actions are unpinned and a high-confidence audit found an unpinned container image. There are no untrusted checkouts or script-injection findings.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jolita Grazyte
Freek Van der Herten
Sebastian De Deyne

Direct Dependencies

DependencyLast ReleaseScore
illuminate/http
Version ^7.0|^8.0
—
—
illuminate/support
Version ^7.0|^8.0
—
—
illuminate/contracts
Version ^7.0|^8.0
—
—
spatie/laravel-package-tools
Version ^1.5
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform