whilesmart/laravel-oauth-apps
The package includes tests, a changelog, a clear MIT license, and organization backing. Its workflow setup still has unpinned actions and installs an ad hoc package, which weakens build hygiene.
61%
Total Score
75
92
50
Health Score Breakdown
The package has only three releases, with the latest about 14 months ago and none in the last 12 months. This indicates a meaningful maintenance slowdown, though the package is still relatively young.
The repository recorded zero commits and zero active maintainers in the last 3 months. That weakens evidence of ongoing maintenance and increases the risk that issues will remain unattended.
The repository has no security policy. For an authentication and API-key package, this reduces disclosure transparency, although the repository does provide tests and release notes.
All five analyzed action references are unpinned, and a high-confidence audit found an ad hoc package installation in commits.yml. No untrusted checkout or script-injection path was found, so this is a hygiene concern rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 WhileSmart |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/passport Version ^13.0 | — | — |
spatie/laravel-fractal Version ^6.3 | — | — |
cviebrock/eloquent-sluggable Version ^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.