This is my package openai-test-generator
38%
Total Score
38
100
72
67
There has been only one release, on August 15, 2023, with no releases in the last 12 months. This is strong evidence of an unmaintained release line.
The repository has zero commits and zero active maintainers in the last three months, reinforcing the abandonment risk shown by the release history.
All 12 action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-conditions finding may allow actor context to be spoofed. The pull_request_target workflow has no untrusted checkout or script-injection sink, so this is serious hygiene risk rather than a standalone critical verdict.
A post-autoload-dump lifecycle script is present. This is an additional install-time behavior that deserves review, but the signal alone does not establish a health problem.
The registry has one publishing maintainer. That is a thin publishing base, and no organization backing is shown to compensate for it.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
openai-php/laravel Version ^0.5.3 | — | — |
illuminate/contracts Version ^10.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.