kiwilan/notifier-laravel
The package has a clear MIT license, useful documentation, repository tests, and a matching source repository. Workflow checks have high-confidence bot-condition risk, and all 15 analyzed actions are unpinned.
60%
Total Score
50
92
0
Health Score Breakdown
The audit found a high-confidence, high-severity bot-conditions issue in the Dependabot auto-merge workflow. All 15 action references are also unpinned, weakening build reproducibility and supply-chain hygiene.
The latest release was on September 26, 2024, with no releases in the following nearly two years. That materially raises maintenance and abandonment concerns.
The repository recorded zero commits and zero active maintainers in the last three months, indicating no recent maintenance activity despite the repository not being archived.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ewilan Rivière |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^10.0 || ^11.0 | — | — |
kiwilan/php-notifier Version ^0.0.40 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.