spatie/laravel-robots-middleware
The package is small and clearly documented, with an MIT license and a recent release supporting Laravel 13. Its long release intervals, no commits in three months, and unsafe unpinned workflow image add maintenance and build-reproducibility concerns.
45%
Total Score
50
79
100
Health Score Breakdown
The package is identified as borrowing the identity of spatie/laravel-medialibrary, which has far more downloads and stable releases; this is strong evidence consumers may have intended the lookalike package.
The package has existed since 2016 but has only 12 releases, with one release in the last 12 months and a median interval of about 347 days; this indicates a slow maintenance cadence.
The repository has had zero commits and zero active maintainers in the last three months, although a release was published during the period, so this is a maintenance warning rather than evidence of abandonment.
All seven action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in php-cs-fixer.yml; this weakens build reproducibility and workflow supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sebastian De Deyne |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^10|^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.