Package Health

smart-dato/desk365-sdk

Desk365 Laravel SDK - A Laravel package to interact with the Desk365 API.

Latest 0.0.9PackagistPackagist

68%

Total Score

caution

Usable with caveats: one contributor carries maintenance and a workflow audit found a high-confidence automation issue.

Health Score Breakdown

Repo bus factorcaution

One contributor made all 6 commits in the last 3 months, creating a concentrated maintenance dependency. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Version stabilitycaution

Version 0.0.9 is not a stable major release, so its API may still change despite being a normal, non-prerelease release. The steady release history partly offsets that maturity concern.

Workflow auditcaution

All five workflows were analyzed with no unpinned action references or untrusted checkouts, but the audit found a high-confidence bot-condition issue in a pull_request_target workflow; two workflows also grant top-level write access. This is a workflow hygiene concern, not evidence of compromise by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

SmartDato

Direct Dependencies

DependencyLast ReleaseScore
saloonphp/saloon
Version ^4.0
—
—
spatie/laravel-data
Version ^4.18
—
—
illuminate/contracts
Version ^11.0||^12.0||^13.0
—
—
spatie/laravel-package-tools
Version ^1.16
—
—

Weekly Downloads

Info

Last Published
4 months ago
Created
10 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform