soyhuce/laravel-json-resources
The repository includes tests, a changelog, a security policy, and dependency scanning. No commits or active maintainers were recorded in the last three months, while two high-confidence workflow findings weaken release hygiene.
62%
Total Score
75
100
94
50
Health Score Breakdown
All five workflows were analyzed, but all 11 action references are unpinned; high-confidence findings also flag a spoofable bot condition and an unpinned container image. The pull_request_target workflow has no untrusted checkout or script-injection sink, so its trigger is not independently dangerous.
The package has existed for about 4 years 6 months with 11 releases, but only one release appeared in the last 12 months, indicating a slow cadence without proving abandonment.
The repository recorded zero commits and zero active maintainers during the last three months, a meaningful maintenance and abandonment concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Bastien Philippe |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^11.0|^12.0 | — | — |
illuminate/contracts Version ^11.0|^12.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.