spatie/spatie-price-api
The MIT license, matching repository, and documented release notes provide good transparency. The organization-backed project has no recent commits, no security policy, and one high-confidence workflow hygiene issue.
68%
Total Score
75
93
67
Health Score Breakdown
The package has existed for over five years with 14 releases, but only one release in the last 12 months, indicating a slow maintenance cadence for a currently released project.
There were no commits and no active maintainers in the last three months. The latest release provides some compensating evidence, but the recent development gap still raises maintenance risk.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it does not by itself show that the package is unsafe.
All three workflows were analyzed with no untrusted checkouts or script injection, but all seven action references are unpinned and the audit found a high-confidence unpinned container image.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Freek Van der Herten |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
guzzlehttp/guzzle Version ^7.2 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.