syrian-open-source/laravel-livv
The repository has tests, release notes, a matching MIT license, and no install-time scripts. Its missing security policy and high-confidence workflow hygiene issues add risk for a package that has seen no maintenance for over three years.
48%
Total Score
50
75
75
Health Score Breakdown
The package has had no release in over three years, with zero releases in the last 12 months; this is strong evidence of abandonment risk despite seven historical releases.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that can modify a Laravel project during installation.
All 11 action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image issues; the pull-request-target workflow also uses top-level write permissions, although no untrusted checkout or script injection was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Roduan Kareem Aldeen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^10.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.