konnco/satset
The artifact has a clear README, changelog, MIT license, and no install scripts. Organization backing, repository tests, and dependency scanning provide useful context, but they do not establish ongoing support.
42%
Total Score
50
83
75
Health Score Breakdown
Only three releases were published, with none in the last 12 months; the latest release is nearly four years old. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The lack of recent development materially lowers confidence in ongoing support.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a modest transparency gap for a package that handles authentication-related functionality.
All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is workflow hygiene and supply-chain risk rather than a standalone critical issue.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Franky So |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/sanctum Version ^3.0 | — | — |
illuminate/contracts Version ^9.0 | — | — |
spatie/laravel-package-tools Version ^1.13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.