tappay/laravel-tap-payment
The package has clear documentation, tests, and release notes, with recent repository activity. Its single-contributor maintenance base and permissive, entirely unpinned workflow setup warrant extra care for production use.
68%
Total Score
50
100
100
100
Health Score Breakdown
The repository is owned by an individual user rather than an organization, so the single-maintainer and concentrated-contribution concerns are not offset by visible organizational backing.
All four recent commits came from one contributor, leaving the project dependent on a single maintainer if that person becomes unavailable.
Four commits from one active maintainer in the last 3 months show ongoing work, though the modest volume limits evidence of sustained maintenance capacity.
All nine workflows were analyzed, but all 44 action references are unpinned and seven workflows grant top-level write permissions. High-confidence template-injection findings in release workflows are hygiene concerns here because no untrusted checkout or injection sink was reported alongside them.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Waqas Majeed |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^11.0 || ^12.0 || ^13.0 | — | — |
guzzlehttp/guzzle Version ^7.10 | — | — |
illuminate/routing Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/support Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/database Version ^11.0 || ^12.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.