opcodesio/spike
It has a clear MIT license, release notes for this version, repository tests, and organizational backing. All three workflow actions are unpinned, and no security policy is present.
60%
Total Score
83
100
94
67
Health Score Breakdown
The package is about 383 days old with only three releases and one release in the last 12 months, indicating a relatively thin release track despite the recent latest release.
There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern for a package handling billing workflows.
No repository security policy is present. That leaves vulnerability reporting and response expectations less transparent for a billing package.
The audit found a high-confidence bot-conditions issue in a pull_request_target workflow, alongside top-level write permissions and all three action references being unpinned. No untrusted checkout or script injection was found, so this is a hygiene and workflow-risk concern rather than a severe standalone failure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Arunas Skirius |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 livewire/livewire Version ^3.8.1 | — | — |
wire-elements/modal Version ^2.0 | — | — |
illuminate/contracts Version ^10.0|^11.7|^12.0|^13.0 | — | — |
arukompas/livewire-charts Version ^3.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.