tfsthiagobr98/laravel-naming-series
The MIT licensing, documented release notes, repository tests, and dependency tooling support responsible use. Maintenance has been inactive for about 18 months, while workflow checks leave all 12 actions unpinned and flag a high-confidence bot-condition issue.
56%
Total Score
50
90
25
Health Score Breakdown
All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; three workflows also grant top-level write access, increasing workflow supply-chain exposure.
Only three releases have been published since January 2024, with no release in the last 12 months and the latest release in March 2025, indicating a slow and currently inactive release cadence.
The repository recorded no commits and no active maintainers in the last three months, reinforcing the evidence of stalled maintenance rather than merely a low release frequency.
No repository security policy is present, leaving vulnerability-reporting guidance undocumented; this is a transparency gap for a package intended to be integrated into applications.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Thiago França da Silva |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^11.0||^12.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.