sfolador/laravel-locked
This package adds locking features to Eloquent Models
56%
Total Score
caution
Usable with caveats: no registry release in over three years and no recent commit activity.
Health Score Breakdown
The package defines a post-autoload-dump Composer script. This adds install-time behavior that warrants awareness, but the signal alone does not show that the script is unsafe.
The registry namespace and repository are owned by the same individual, giving clear ownership context; there is no organization backing shown to offset the single-owner maintenance risk.
The latest registry release was over three years ago, with no releases in the last 12 months. This is a substantial maintenance concern despite the repository remaining available.
The repository recorded zero commits and zero active maintainers in the last three months. This reinforces the long gap since the latest registry release and raises abandonment risk.
There are no new or closed issues in the last month, but four open pull requests show some outstanding project activity rather than a completely unused repository.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 sfolador |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^9.0|^10 | — | — |
spatie/laravel-package-tools Version ^1.13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.