jtmcc/lara-schema-validation
It includes tests, a clear README, a matching repository, and an MIT license. Unpinned workflow actions and no security policy add modest transparency and build-hygiene concerns.
55%
Total Score
25
79
67
Health Score Breakdown
There were zero commits and zero active maintainers in the last three months, following the only release about 15 months ago; this is the strongest indication that maintenance has stalled.
The package runs a post-autoload-dump script during installation. This is a potentially relevant supply-chain surface, but the signal does not show that the script is harmful or unusually broad.
The package is maintained under a personal user account rather than organization backing, so the single-person maintenance model provides limited demonstrated continuity.
The package has made only one release, with no releases in the last 12 months, so its maintenance track record is unproven and may indicate stagnation.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in repository hygiene for a package intended for development workflows.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 J-T-McC |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 opis/json-schema Version ^2.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.