milon/bohurupee-laravel
The package includes tests in its repository, a clear license, a security policy, and no install-time scripts. Its workflow references are not pinned, which weakens build reproducibility; longer-term maintenance remains unproven.
67%
Total Score
67
79
83
Health Score Breakdown
The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not visibly compensated by broader project backing.
This release is from a package that is less than one day old, with three releases arriving over roughly 10-hour median intervals. That shows active initial work but provides little evidence of sustained maintenance.
One contributor made all eight commits in the last three months, leaving maintenance dependent on a single individual. No organizational backing is shown to compensate for that concentration.
Composer is used for the build, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of abandonment.
Version v0.5.5 is not a stable major release, so compatibility maturity is not yet established. It is not marked as a prerelease, which partly offsets the concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 milon |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/socialite Version ^5.16 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 5 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.