theihasan/bagisto-bkash
The package includes tests, a changelog, a README, matching MIT licensing, and repository security tooling. Its single release and zero commits in the last three months provide limited evidence of durable maintenance, while workflow permissions and automation conditions need care.
58%
Total Score
50
100
94
50
Health Score Breakdown
This is the only release, published about 9 months after the package first appeared, with no additional releases in the last 12 months. That gives limited evidence of an established maintenance cadence.
The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed within the observed period, recent activity is currently too sparse to show sustained maintenance.
The repository has no security policy. This is a transparency gap for a payment integration, although Dependabot is enabled as compensating security tooling.
All 12 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-condition finding affects the Dependabot auto-merge workflow. There is no untrusted checkout or script-injection finding, which limits the severity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Abul Hassan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^9.0|^10.0|^11.0|^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 9 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.