Package Health

lara-zeus/progress

Documentation and packaging are complete, with a clear license and release notes. Recent work is concentrated in one contributor, and the workflow audit found a high-confidence bot-condition issue; organization backing and Dependabot provide some mitigation.

Latest 3.0.1PackagistPackagist

70%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Repo bus factorcaution

One contributor made all two commits in the last three months. The organization-owned project can potentially hand off maintenance, but observed activity still has a narrow contributor base.

Repo commit activitycaution

Only two commits were made in the last three months. Recent release activity offsets this somewhat, but the source activity is limited.

Workflow auditcaution

All five workflows were analyzed and all 12 action references are pinned, with no untrusted checkout or script-injection findings. However, a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow, and three workflows grant top-level write permissions.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

lara-zeus

Direct Dependencies

DependencyLast ReleaseScore
filament/filament
Version ^5.0
spatie/laravel-package-tools
Version ^1.16

Weekly Downloads

Info

Last Published
5 months ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform