jessarcher/laravel-castable-data-transfer-object
The package is well documented, and its source includes tests, release notes, and security scanning. Unpinned workflow images add a smaller reproducibility concern.
12%
Total Score
0
57
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because future fixes and support are not expected.
The latest release is v2.3.0 from March 14, 2023, with no releases in the last 12 months. This reinforces the abandonment concern, although the project previously had a regular release cadence.
The repository recorded zero commits and zero active maintainers in the last three months. This is consistent with the archived state and leaves no evidence of ongoing maintenance.
The source repository is archived, and its last push was on February 27, 2024. An archived project is no longer maintained and is a severe dependency risk.
All three workflows were analyzed successfully, with no untrusted checkouts or script injection, but all seven action references are unpinned and a high-confidence audit found an unpinned container image. This is a reproducibility and build-integrity caution, not the main adoption blocker.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jess Archer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^8.0|^9.0|^10.0 | — | — |
thecodingmachine/safe Version ^1.3|^2.0 | — | — |
spatie/data-transfer-object Version ^3.0.4 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.