ralphjsmit/laravel-helpers
The package has clear documentation, tests in the repository, a matching MIT license, and a security policy. No commits were recorded in the last three months, while all nine workflow actions are unpinned and one workflow has a high-confidence bot-condition finding.
63%
Total Score
50
94
83
Health Score Breakdown
The package has existed for about 4 years and 8 months with 18 releases, but only one release in the last 12 months. The recent release provides some evidence of continued publishing, though the current cadence is limited.
The repository recorded zero commits and zero active maintainers in the last three months. This is the strongest maintenance concern because it suggests current development has paused.
All four workflows were analyzed, but all nine action references are unpinned, weakening build reproducibility. The audit also found a high-confidence bot-condition issue in the Dependabot auto-merge workflow; the pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ralph J. Smit |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.4 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.