smartcoder01/cart
The package has a clear README, repository tests, and matching MIT licensing. Its only release was 566 days ago, with no commits in the last three months, and the workflow audit found a high-confidence unpinned container image.
42%
Total Score
0
100
75
67
Health Score Breakdown
This is the package's only release, published 566 days ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance for a dependency released this long ago.
The repository recorded 0 commits and 0 active maintainers in the last three months, reinforcing the concern that development has stalled.
The repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no visible community buffer alongside the single-release history.
The repository has no security policy or security-scanning tooling. This is a transparency and maintenance gap, though it is less significant than the stalled activity.
All 4 analyzed action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image. The workflows have no dangerous trigger or untrusted checkout, which limits the impact but does not remove the build-integrity concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jackie Do |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/framework Version ^12.0|^11.0|^10.0|^9.0|^8.0|^7.0|^6.0|^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.