michelmelo/mm-laravel-auto-git-pull
The package is straightforward to integrate. No release has appeared since October 2020, and the missing license plus unpinned workflows weaken long-term trust and maintenance confidence.
42%
Total Score
50
71
100
Health Score Breakdown
The latest release was published in October 2020, with no releases in the last 12 months. This long gap is a substantial abandonment concern for a deployment-related package.
No license is declared, detected, or present in the package or repository. That leaves the legal terms for using this dependency unclear.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the prolonged release gap and limited evidence of ongoing maintenance.
Composer is used for builds, but no security-scanning tooling is present. For a package involved in automated deployment, this is a meaningful transparency and maintenance gap.
Both workflows were fully analyzed and had no high-confidence audit findings, but all five action references are unpinned. This leaves avoidable build-reproducibility and workflow supply-chain exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Michel Melo |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpseclib/phpseclib Version >=2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.