oneduo/laravel-gitlab-webhook-client
The package has clear documentation, repository tests, and a modest dependency footprint. Its release activity has stopped for about 17 months, while the workflows also use unpinned actions and contain a high-confidence bot-condition finding.
62%
Total Score
75
100
88
67
Health Score Breakdown
The package uses a post-autoload-dump script, which adds install-time behavior and warrants awareness, but this is a common Composer lifecycle hook and is not by itself a health failure.
The project has 17 releases over about three years, but no registry release has appeared for about 17 months. That gap raises maintenance risk despite the earlier regular median interval of about 26 days.
The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although the repository was pushed within the past year.
There are no new or closed issues in the last month and no merged pull requests, while five pull requests remain open; this suggests limited recent project movement.
The repository has no security policy. This is a transparency gap for a package that handles incoming webhooks, though it does not establish abandonment by itself.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Charaf Rezrazi |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spatie/laravel-data Version ^3.5 | — | — |
illuminate/contracts Version ^10.0|^11.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.