soyhuce/laravel-somake
Documentation, tests, licensing, and project ownership are all in place, with no install-time scripts. Maintenance has paused for over a year, and workflow controls need tightening before relying on it long term.
61%
Total Score
75
93
100
Health Score Breakdown
The package has 22 releases over about four and a half years, but it has had no releases in the last 12 months; that is a meaningful sign of slowing maintenance.
The repository recorded no commits and no active maintainers in the last 3 months, reinforcing the concern that development has slowed.
All 11 action references are unpinned, one workflow uses an unpinned container image, and a high-confidence bot-condition issue appears in the auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection finding, so these are hygiene concerns rather than a severe standalone risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Bastien Philippe |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spatie/fork Version ^1.1 | — | — |
laravel/prompts Version ^0.3.1 | — | — |
illuminate/console Version ^11.0|^12.0 | — | — |
illuminate/support Version ^11.0|^12.0 | — | — |
illuminate/contracts Version ^11.0|^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.