sashalenz/monobank-api
It has clear licensing, release notes, tests, and a repository that matches the package. Its single maintainer and broad workflow permissions leave less safety margin.
68%
Total Score
50
88
50
Health Score Breakdown
The package runs a post-autoload-dump lifecycle script during installation. This adds install-time behavior that consumers should understand, but the signal alone does not show harmful or excessive activity.
Only one registry account has publish access. For a user-owned project this is a thin publishing base and leaves little redundancy if that maintainer becomes unavailable.
There were no commits and no active maintainers in the last 3 months. This indicates a recent maintenance pause and raises abandonment risk despite the package's release history.
The repository has 0 stars, 0 forks, and 1 watcher. Low visibility is supporting caution, but it does not outweigh the direct release and repository evidence by itself.
The repository uses Composer but reports no security scanning tools. This is a modest transparency and maintenance gap, not a severe risk on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 sashalenz |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spatie/laravel-data Version ^4.20 | — | — |
illuminate/contracts Version ^10.0||^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.93 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.