specialtactics/l5-api-boilerplate
The repository is not archived and includes tests, a README, and release notes, but recent commit activity is absent. Its CI also uses an unpinned container image and lacks a security policy.
36%
Total Score
50
75
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement package supplied. This is a major maintenance and adoption risk, though the linked repository is not archived.
The package has 20 releases since 2019, but none in the last 12 months and its latest registry release was in May 2025. That indicates a substantial recent slowdown.
The repository recorded zero commits and zero active maintainers in the last three months. This weakens evidence that the project is currently maintained.
The linked repository has no security policy. For a Laravel API boilerplate, this is a transparency gap, although it is not evidence of a specific vulnerability.
The single analyzed workflow has no untrusted checkout or injection findings, but it uses two unpinned references and includes a high-confidence, high-severity unpinned container image. The audit itself completed fully.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Max Snow |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/tinker Version ^2.9 | — | — |
guzzlehttp/guzzle Version ^7.6 | — | — |
laravel/framework Version ^11.31 | — | — |
specialtactics/l5-api Version ^6.0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.