jackbayliss/laravel-model-connection
Clear licensing, tests, release notes, and a security policy make the package easier to adopt. Its dependency set is small and it has no install-time scripts.
62%
Total Score
50
100
94
83
Health Score Breakdown
The repository is owned by an individual rather than an organization, so the single-maintainer and single-contributor concentration is not offset by visible organizational backing.
The package has only two releases, both published on the same day, despite being 212 days old. That leaves its longer-term release maintenance unproven.
One contributor made 100% of the commits in the last three months, leaving maintenance dependent on a single active developer.
Only one commit was recorded in the last three months, indicating limited recent development activity even though the repository was pushed recently.
The audit analyzed all four workflows and found one high-confidence bot-condition issue; additionally, 13 of 14 action references are unpinned, which weakens build reproducibility. The pull_request_target workflow has no untrusted checkout or script-injection finding, so this is a hygiene and automation concern rather than a severe standalone risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jack Bayliss |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/database Version ^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 7 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.