mr-punyapal/laravel-extended-relationships
It has a clear MIT license, release notes, repository tests, and five releases in the past year. The single-contributor pattern, absent security policy, and unpinned workflow actions leave meaningful maintenance and build-hygiene concerns.
72%
Total Score
50
100
50
Health Score Breakdown
One contributor made 100% of the recent commits, creating a concentrated bus factor for a user-owned project without organizational backing.
Ten commits were made in the last three months, but all came from one active maintainer, limiting evidence of sustained maintenance capacity.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
All five analyzed action references are unpinned, and one workflow grants top-level write permissions; the audit found no untrusted checkout or script-injection path, so this is build hygiene rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Punyapal Shah |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.