Package Health

skaisser/laravel-lead

The package includes tests, a substantial README, and clear MIT licensing. Its single-person ownership and inactive repository leave limited evidence of ongoing support; pin this version if adopting.

Latest v1.2.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

90

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Maintainerscaution

The registry lists one maintainer. That is not inherently unhealthy, but combined with the lack of recent repository activity it indicates a thin support base.

Release historycaution

Only two releases exist, both published within a short period, and there have been no releases in about 15 months. This leaves limited evidence of sustained maintenance.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, consistent with the roughly 15-month gap since the last push and indicating weak current support.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in a package that manages lead data and webhooks.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned, leaving avoidable build-reproducibility and action-substitution risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Shirleyson Kaisser

Direct Dependencies

DependencyLast ReleaseScore
illuminate/http
Version ^10.0|^11.0|^12.0
—
—
illuminate/cache
Version ^10.0|^11.0|^12.0
—
—
illuminate/queue
Version ^10.0|^11.0|^12.0
—
—
illuminate/support
Version ^10.0|^11.0|^12.0
—
—
illuminate/database
Version ^10.0|^11.0|^12.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform