purrdigital/laravel-crud-package
The repository has tests, release notes, a README, and an MIT license. Its workflows contain high-confidence bot-condition and unpinned-container findings, despite having no install-time scripts and using Dependabot security tooling.
48%
Total Score
50
79
75
Health Score Breakdown
The latest release was in June 2023, with no releases in the following three years and only three releases overall. This substantially raises abandonment risk for a package intended to support evolving Laravel projects.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The non-archived status does not compensate for the absence of recent maintenance.
The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but these values provide no additional maturity or community-maintenance signal.
All eight analyzed action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container issues. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are serious hygiene concerns rather than a standalone critical risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 PurrDigital |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/helpers Version ^1.5 | — | — |
illuminate/contracts Version ^7.0|^8.0|^9.0|^10.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.