laravel-json-api/hashids
Maintenance is light, with no commits in the last three months and releases roughly six months apart. It has clear licensing, tests in the repository, recent publication, and organizational backing, but the identity concern remains significant.
48%
Total Score
75
75
75
Health Score Breakdown
The package is reported as borrowing the identity of laravel/pint, which has far more downloads and stable releases; this is strong evidence consumers may have intended the lookalike package.
The package has existed for about 5 years and 6 months with 10 releases, but only one release in the last 12 months and a median interval of about 193 days indicate a slow cadence.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of limited current maintenance capacity.
The project uses Composer, but no security scanning tools were detected; this is a modest transparency and hygiene gap.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Cloud Creativity Ltd |
| Christopher Gammie |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 vinkla/hashids Version ^12.0|^13.0|^14.0 | — | — |
laravel-json-api/core Version ^5.2.0 | — | — |
laravel-json-api/eloquent Version ^4.5 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.