vedmant/laravel-feed-reader
It is licensed, tested, and clearly linked to its source. The workflow leaves all three actions unpinned, and the project has no security policy.
67%
Total Score
50
92
75
Health Score Breakdown
The package has a long history and 20 releases, but no release was published in the last 12 months; the latest release was over a year ago, which lowers maintenance confidence.
The repository recorded no commits and no active maintainers in the last three months. Its recent release and push provide some evidence of past maintenance, but current activity is absent.
No security policy is present in the repository. This is a transparency gap, although the package remains licensed and its workflow audit found no reported security findings.
The single workflow was fully analyzed with no high-confidence audit findings or untrusted checkout paths, but all three action references are unpinned, leaving avoidable build-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Vedmant |
| Andrew Judd |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version >=5.5.0 | — | — |
simplepie/simplepie Version ^1.8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.