nycorp/lang-helper
Tests, release notes, and a matching repository improve transparency. The workflow setup and long release gap warrant caution for ongoing maintenance.
50%
Total Score
50
93
50
Health Score Breakdown
The package has only three releases, all within about four days in April 2025, and none in the last 12 months. That short burst followed by a long release gap raises maintenance risk.
The repository recorded zero commits and zero active maintainers in the last three months. Although the repository was pushed more recently, current development activity is not demonstrated.
The repository has no security policy. This is a transparency gap for reporting and handling security issues, though it does not by itself show the package is unsafe.
All 12 analyzed action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script injection was found, limiting the severity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Yvan Ngalle |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^10.0||^11.0||^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.