thejenos/laradump

A documented README, MIT licensing, repository tests, and static analysis provide useful transparency. Its small dependency set and clean workflow triggers help, but the remaining maintenance evidence is not strong enough for a new dependency.

Latest 1.1.8

Packagist

15%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning that maintainers no longer support it as a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This supports the abandonment concern rather than showing ongoing maintenance capacity.

Repository archived

The linked repository is archived, so it is no longer maintained through the normal development workflow. Its last push was on September 16, 2024, reinforcing the abandonment risk.

Release history

The package has nine releases but none in the last 12 months; its latest release was April 24, 2024. Earlier releases show a short median interval, but current activity has stopped.

Workflow audit

All three workflows were analyzed with no untrusted checkouts or script injection, but all seven action references are unpinned and a high-confidence audit found an unpinned container image. This is a maintenance and build-integrity hygiene concern, not the primary risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Thanura Nadun

Direct Dependencies

Dependency	Last Release	Score
spatie/backtrace Version ^1.2	—	—
illuminate/contracts Version ^5.5\|^6.0\|^7.0\|^8.0\|^9.0\|^10.0\|^11.0	—	—
spatie/laravel-package-tools Version ^1.4.3	—	—