onursimsek/laravel-extended
The release is stable, documented, and has a small runtime dependency surface. Repository activity is quiet, and the automation setup leaves little protection against workflow changes.
62%
Total Score
50
100
94
50
Health Score Breakdown
The package has six releases over roughly two years, but only one release in the last 12 months, indicating a small and currently quiet release cadence.
The repository recorded zero commits and zero active maintainers in the past three months, a meaningful warning about current maintenance capacity.
No security policy is present in the repository, leaving vulnerability-reporting expectations unclear; this is a minor transparency gap rather than a severe risk.
All 12 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. There are no untrusted checkouts or script-injection findings, which limits the severity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Onur Şimşek |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^10.0|^11.0|^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.