japseyz/plot-lookup
Recent repository activity, tests, a changelog, and a clear MIT license support ongoing maintenance. The small release history and missing security policy leave less evidence than a mature dependency would.
68%
Total Score
100
93
50
Health Score Breakdown
The package is 415 days old with three releases and only one release in the last 12 months; the median interval is about 174 days. A release was published recently, so this indicates a small and intermittent history rather than abandonment.
The repository has no security policy. This is a transparency and response-process gap, though it is not evidence that the package is unsafe by itself.
The audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow, and all 12 action references are unpinned. The pull_request_target trigger has no untrusted checkout or script-injection findings, limiting the severity but leaving meaningful workflow hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jesper Jacobsen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^10.0||^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.