still-code/ar-php-laravel
It has clear documentation, MIT licensing, repository tests, and a matching source tree. Organization backing and Dependabot provide some continuity, but no security policy limits transparency.
64%
Total Score
75
100
94
50
Health Score Breakdown
The package is mature at about 5 years old with 16 releases, but only one release in the last 12 months and a median interval of about 128 days indicate a slow cadence.
No commits or active maintainers were recorded in the last 3 months, which is a meaningful maintenance concern, although the release history and June repository push show the project is not abandoned outright.
No security policy was found in the repository, reducing transparency for reporting and handling vulnerabilities in a package used as a framework integration.
All 12 analyzed action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so these are workflow-hygiene concerns rather than a severe standalone risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ashraf Monshi |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
khaled.alshamaa/ar-php Version ^6.3 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.