maxlego08/laravel-discord-alerts
The package is licensed, documented, tested in its repository, and uses Dependabot, but it has had no new release or commit activity for about 18 months. Its workflows also contain high-confidence bot-condition and unpinned-image findings, so pinning this release carries meaningful maintenance and build risk.
48%
Total Score
50
100
86
50
Health Score Breakdown
Only one release exists, published about 18 months ago, with no releases in the last 12 months; this is substantial evidence of limited ongoing maintenance.
All 11 action references are unpinned, and the audit reports high-confidence bot-condition and unpinned-image findings. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are serious hygiene concerns rather than an independent critical risk.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the abandonment concern from the sparse release history.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Rias Van der Veken |
| Niels Vanpachtenbeke |
| Freek Van der Herten |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^10.0|^11.0|^12.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.