ngmy/eloquent-serialized-lob
It includes tests, a clear MIT license, and a matching repository, with no install-time scripts. The workflow uses unpinned images, so its build hygiene is weaker than its package structure.
53%
Total Score
50
90
75
Health Score Breakdown
The package has had no release in more than five years, with zero releases in the last 12 months. Its four-release history shows a real project, but the long gap raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months. A push in February 2023 shows it was not always dormant, but current maintenance capacity is unclear and appears stalled.
There are five open pull requests, with no new or merged pull requests in the last month. The lack of issue backlog is positive, but unmerged contributions reinforce the maintenance concern.
The single workflow was fully analyzed and has no untrusted checkout or script-injection findings, but all 8 action references are unpinned and the audit identified a high-confidence unpinned container image.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Yuta Nagamiya |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jms/serializer Version ^3.11.0 | — | — |
illuminate/support Version ^6.0|^7.0|^8.0 | — | — |
doctrine/annotations Version ^1.11.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.