moonlydays/laravel-metrics
The repository is small but includes tests, a changelog, and a matching package reference. Missing security scanning and an absent security policy add transparency gaps, while all five workflow actions are unpinned.
42%
Total Score
0
100
81
50
Health Score Breakdown
The latest release was over one year ago, with no releases in the last 12 months. Although 20 releases were published during its short initial period, the current pause raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the prolonged release pause and leaving little evidence of ongoing maintenance.
The package runs a post-autoload-dump install-time script. Lifecycle execution adds integration and review surface, though the signal does not show a dangerous script body.
Composer build tooling is present, but no security scanning tools were detected. This weakens the project's automated supply-chain hygiene.
No security policy was found, so there is no documented channel or process for reporting vulnerabilities. This is a transparency gap for a package intended for application integration.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniil Basiuc-Brinzei |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^10.0||^11.0||^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.