thuraaung2493/lara-mm-nrc
A clear README, MIT licensing, repository tests, and a matching source tree improve transparency. The install-time script, absent security policy, and unpinned workflow actions add maintenance and build-hygiene concerns.
55%
Total Score
50
92
50
Health Score Breakdown
The package runs a post-autoload-dump install-time script. This is relevant execution during installation and warrants caution, although the signal does not show malicious behavior or excessive scripting.
The package has only one release, published nearly three years ago, with no releases in the last 12 months. That makes ongoing maintenance uncertain despite the repository remaining available.
There were no commits and no active maintainers in the last three months, consistent with the long gap since the initial release. This raises abandonment risk for a package still marked v0.1.0.
The repository has no security policy. For a small package this is a transparency gap, though the README, tests, and source repository provide some compensating project evidence.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 3 action references are unpinned. That is a build-integrity hygiene gap rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 thuraaung2493 |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nunomaduro/mock-final-classes Version ^1.2 | — | — |
thuraaung2493/laravel-config-types Version ^0.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.