webard/laravel-access-control
The package has clear documentation, repository tests, release notes, a license, and a security policy. Its sole maintainer and single recent contributor provide little confidence that future fixes will arrive.
15%
Total Score
50
100
75
100
Health Score Breakdown
Packagist marks the entire package as abandoned and names happenv-com/laravel-access-control as a replacement. This directly indicates that new projects should not depend on this package.
The linked source repository is archived, which prevents normal ongoing maintenance and makes future compatibility or security fixes unlikely.
One contributor made 100% of recent commits. This leaves no demonstrated contributor redundancy for maintaining the package.
Only 1 commit from 1 active maintainer was recorded in the last 3 months. That is weak recent maintenance evidence, especially alongside the archived repository.
All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 webard |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^12.20|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 8 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.