pod-point/laravel-configcat
The repository includes tests, a substantial README, and a release note for this version. Its workflow uses three unpinned actions and the project has no published security policy, adding maintenance and hygiene concerns.
58%
Total Score
75
93
50
Health Score Breakdown
The package has 10 releases since February 2023, but none in the 12 months after its latest release on December 17, 2024. That long release gap lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the absent recent registry releases, this is a meaningful abandonment concern.
The repository has no security policy. For a small package this is a transparency gap, though the repository is active enough historically and the workflow audit found no concrete dangerous behavior.
The only workflow was fully analyzed with no high-confidence audit findings or untrusted code paths, but all 3 of its action references are unpinned. That is a moderate supply-chain hygiene gap, not a severe risk on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Pod Point Software Team |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^10.0|^11.0 | — | — |
configcat/configcat-client Version ^9.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.