Package Health

morningtrain/data-transfer-object-casters

The release is licensed, documented, tested in its repository, and has a matching source project with a security policy. Its maintenance has ended, and the repository and package are no longer supported; the workflows also use an unpinned container image.

Latest 2.0.0PackagistPackagist

12%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

50

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. This is a severe adoption and support risk rather than a cosmetic metadata issue.

Release historydanger

The package has had no release in more than 3 years and no releases in the last 12 months. Combined with the archived repository, this indicates sustained abandonment rather than a temporary pause.

Repo commit activitydanger

There were 0 commits and 0 active maintainers in the last 3 months. The archived state and release gap reinforce that there is no current maintenance capacity.

Repository archiveddanger

The linked repository is archived, and its last push was on March 24, 2023. An archived source project is a strong indication that maintenance and issue response have ended.

Workflow auditcaution

Both workflows were analyzed and have no untrusted triggers or script-injection sinks, but all 4 action references are unpinned and a high-confidence finding reports an unpinned container image. This weakens build reproducibility and workflow hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Simon Jønsson

Direct Dependencies

DependencyLast ReleaseScore
illuminate/contracts
Version ^8.37 | ^9.0 | ^10.0
spatie/data-transfer-object
Version ^3.7
spatie/laravel-package-tools
Version ^1.4.3

Weekly Downloads

Info

Last Published
3 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform